DllCanUnloadNowW
DllRegisterServerW
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
f4002675c82e06499f8ffd0b94cc27f9c6b725f8cdb51c544bea929f9942403d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4002675c82e06499f8ffd0b94cc27f9c6b725f8cdb51c544bea929f9942403d.dll
Resource
win10v2004-20221111-en
Target
f4002675c82e06499f8ffd0b94cc27f9c6b725f8cdb51c544bea929f9942403d
Size
4KB
MD5
b4597b5592ff9e9d041a71719ffc1e1e
SHA1
b0664e958b88107706910badb2371a75eed531b8
SHA256
f4002675c82e06499f8ffd0b94cc27f9c6b725f8cdb51c544bea929f9942403d
SHA512
2491b954cfd4086e0d79635729f869b8ac033d2d01bcd0e374344398424f92cd13369daa6dcc0d74344849154417afe9ce6c01678735425a80c7105bf7fce6ca
SSDEEP
48:q7S+jjDVeUteG70DLQ7bnodPNh4ujFU8XLXYUXLXvrk7cjpztU/tG:ASkPMTk/iquRNnDo7cjltU/tG
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
HeapFree
FreeLibrary
GetModuleFileNameA
CreateEventA
CloseHandle
OpenEventA
CreateThread
FreeConsole
LoadLibraryA
Sleep
GetProcAddress
SetServiceStatus
RegisterServiceCtrlHandlerW
DllCanUnloadNowW
DllRegisterServerW
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ