DriverProc
ServiceMain
widMessage
wodMessage
Static task
static1
Behavioral task
behavioral1
Sample
c8bc8832adc85ea499c0f79e57ea3a94ddbccf465c5837489ceceaabe8fe06e4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c8bc8832adc85ea499c0f79e57ea3a94ddbccf465c5837489ceceaabe8fe06e4.dll
Resource
win10v2004-20220812-en
Target
c8bc8832adc85ea499c0f79e57ea3a94ddbccf465c5837489ceceaabe8fe06e4
Size
19KB
MD5
c6eff1794ea96695596708911ba94580
SHA1
6e3706c68f8e0aa696383e6bc1a0404e48846ce5
SHA256
c8bc8832adc85ea499c0f79e57ea3a94ddbccf465c5837489ceceaabe8fe06e4
SHA512
592af459c7f916ccbb7f6e396d7d23d9374c4ea09d32cab65acb867f9e3bac8e44a22feb59d8c9d67b83e0abc804b2e2fdd5147bac253d918c57da06201b2689
SSDEEP
384:sudqH2iV3OBYjMJjxwiqIbi1a4v8Y3v5WMo/bwW9Dg:s8idOCWjxwMbaa4v8Y3v+HDg
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FreeConsole
ExitProcess
lstrcmpiA
CreateThread
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WaitForSingleObject
GetModuleFileNameA
CloseHandle
OpenWindowStationA
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
_initterm
strncpy
memcpy
strrchr
strcat
strlen
free
malloc
_adjust_fdiv
SetServiceStatus
RegisterServiceCtrlHandlerExA
DriverProc
ServiceMain
widMessage
wodMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ