DriverProc
ServiceMain
widMessage
wodMessage
Static task
static1
Behavioral task
behavioral1
Sample
327131e4e690164fec7e94b1e98fdb5dac402885471188350e90bf22ffbb1b6f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
327131e4e690164fec7e94b1e98fdb5dac402885471188350e90bf22ffbb1b6f.dll
Resource
win10v2004-20221111-en
Target
327131e4e690164fec7e94b1e98fdb5dac402885471188350e90bf22ffbb1b6f
Size
18KB
MD5
62d9bc0e97bc02209bf0c92907d2cdd0
SHA1
3a7d215ec71170ffe814bb8859bfe427b2152f54
SHA256
327131e4e690164fec7e94b1e98fdb5dac402885471188350e90bf22ffbb1b6f
SHA512
46bac958ea3e313d473579862f93ac37f9470d4638f438f996b6fc2ab5b956cad910d2b3b5a3cacd0eee52404ca57a075b3f602fc128c971faa496d16fafe90f
SSDEEP
384:sldqH2iV3OVxQFYYIji1y/v8Y3v5WMo/bwW0:sjidOvQFYPjay/v8Y3v+q
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FreeConsole
ExitProcess
lstrcmpiA
CreateThread
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WaitForSingleObject
GetModuleFileNameA
CloseHandle
OpenWindowStationA
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
_initterm
strncpy
strrchr
strcat
memcpy
strlen
free
malloc
_adjust_fdiv
SetServiceStatus
RegisterServiceCtrlHandlerExA
DriverProc
ServiceMain
widMessage
wodMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ