InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6.dll
Resource
win10v2004-20220901-en
Target
b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6
Size
75KB
MD5
949a552c128ca891ef292cda1e06f508
SHA1
f2221282981b179a284e2586f2d5a4926427258e
SHA256
b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6
SHA512
4fd3e75d099f3786b464ba98575acae336319d1d67d6ccbfc64bb25826b90b17f4db628aeec245500fff35d4bd3215f428aff7b1f16a0af70ba55a5117eb3a48
SSDEEP
1536:HvVV2xwGh0ia542fJ6ZkcLBaJo/Fg6DIOlIOjKnToIf740OKWl:mxLhSK2fJ0aJo/K6lvSTBf73OKWl
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
timeGetTime
getpeername
ioctlsocket
select
send
closesocket
socket
recv
getsockname
setsockopt
connect
WSAStartup
htons
GetLastError
SetLastError
GetModuleFileNameA
GetComputerNameA
GlobalMemoryStatus
GetSystemInfo
GetCurrentThreadId
GetVersionExA
CloseHandle
QueryPerformanceCounter
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateProcessA
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
Sleep
FreeConsole
SetProcessWindowStation
OpenDesktopA
GetThreadDesktop
GetProcessWindowStation
CloseDesktop
OpenWindowStationA
SwitchDesktop
SetThreadDesktop
GetSystemMetrics
FindWindowA
GetDC
BitBlt
GetDIBits
CreateDCA
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
GetUserNameA
ChangeServiceConfigA
RegCloseKey
OpenSCManagerA
SetServiceStatus
RegCreateKeyA
CreateServiceA
RegQueryValueExA
RegisterServiceCtrlHandlerA
DeleteService
CloseServiceHandle
OpenServiceA
RegOpenKeyExA
RegSetValueExA
_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
strncat
strchr
strncpy
rand
srand
wcstombs
_time64
sprintf
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
??_U@YAPAXI@Z
_invalid_parameter_noinfo
fopen
??_V@YAXPAX@Z
fwrite
fclose
free
malloc
perror
printf
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler3
memset
memcpy
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ