gytfredwse
ServiceMain
qwaszxerd
Static task
static1
Behavioral task
behavioral1
Sample
80825f349695c1fc8765fed53aa72313f0ba8e1ed5c0d4d2e6f1aa2f3ec17099.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80825f349695c1fc8765fed53aa72313f0ba8e1ed5c0d4d2e6f1aa2f3ec17099.dll
Resource
win10v2004-20220812-en
Target
80825f349695c1fc8765fed53aa72313f0ba8e1ed5c0d4d2e6f1aa2f3ec17099
Size
35KB
MD5
e54a82863b19b98cd399df416c405eb1
SHA1
ea6201a8b3038f1aef31ca07615341aaaa98ec4a
SHA256
80825f349695c1fc8765fed53aa72313f0ba8e1ed5c0d4d2e6f1aa2f3ec17099
SHA512
45893ec127f5467af6cb516035e7de43eb1ac09d4c0577dbb0df89ef615625eb4d92e3a168454f998a2b403db4fccb874f3f67fd37feb91dc77ee9e87a6a2c73
SSDEEP
768:L5zJyCCyyxcdtpciAP8nenkVE1G9C8XHoSUSLBFdj:L5z7CdepDjnenkVEskwIJSLBH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetModuleFileNameExA
ExitWindowsEx
malloc
ShellExecuteA
StrCmpW
listen
ImmReleaseContext
DeleteObject
RegCloseKey
capCreateCaptureWindowA
CreateStreamOnHGlobal
waveInUnprepareHeader
gytfredwse
ServiceMain
qwaszxerd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE