ServiceMain
222222222222
Qy001DoMainWSSK
Static task
static1
Behavioral task
behavioral1
Sample
f23297c06fa1218c921d409da24af50b647c4f13db28ff1a64ba574e9019c18f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f23297c06fa1218c921d409da24af50b647c4f13db28ff1a64ba574e9019c18f.dll
Resource
win10v2004-20220812-en
Target
f23297c06fa1218c921d409da24af50b647c4f13db28ff1a64ba574e9019c18f
Size
38KB
MD5
7b344c906b4da18e6fb04ace36a77a34
SHA1
43e4012c6ce10e4802a754218dfae4e195193710
SHA256
f23297c06fa1218c921d409da24af50b647c4f13db28ff1a64ba574e9019c18f
SHA512
748367149ad9f4d146904283c60c4917df231c66e9338d426da2ecd508fc6e754bcf5281219792557f49cb57d9f60dd0716a0a569bad6b9590e899a06e239486
SSDEEP
768:VzSM693jH/gtfXPfijGVmvpCAnWv1hKaeZACE8KTOBG1kX0ZkxDFt:tv693zgtPfijf1O1saWAS/UkxDFt
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ImmGetContext
capCreateCaptureWindowA
waveInStop
RegCloseKey
free
BitBlt
StrChrA
listen
GetModuleFileNameExA
CreateStreamOnHGlobal
ShellExecuteA
IsWindow
ServiceMain
222222222222
Qy001DoMainWSSK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE