ServiceMain
aaaa
bbbb
main
Static task
static1
Behavioral task
behavioral1
Sample
c7748803fcac3b5f4c794a74701926b0745c6557d1db144123e060a16c062893.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c7748803fcac3b5f4c794a74701926b0745c6557d1db144123e060a16c062893.dll
Resource
win10v2004-20221111-en
Target
c7748803fcac3b5f4c794a74701926b0745c6557d1db144123e060a16c062893
Size
108KB
MD5
8f42d3d0d8f26b5bba5239d2859e4f42
SHA1
3839f133b1badc0ccc093abd139f2cf9320bac22
SHA256
c7748803fcac3b5f4c794a74701926b0745c6557d1db144123e060a16c062893
SHA512
5fabe664b58be5e9162c752c549149193635eda3bf1a9d7392d39842e5eda438a0948f60888ea478f19f211a5bb5251428c4d79bb08d2edee8afb9993a10c217
SSDEEP
1536:eG08202CzEloQzzB+jFyC2qBPQRsg+6RlGj2SjGTcmyNfdSsYouKJDbDCwDG+gyd:I8m+j7IRkGT5y1dSsOKDvCwDGA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateEventA
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
ResumeThread
CreateThread
GetProcAddress
LoadLibraryA
DeleteCriticalSection
VirtualFree
EnterCriticalSection
VirtualAlloc
ResetEvent
lstrcpyA
CancelIo
Sleep
lstrcatA
GetWindowsDirectoryA
FreeLibrary
DeleteFileA
GetLastError
CreateDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalReAlloc
RemoveDirectoryA
GetFileSize
CreateFileA
ReadFile
WriteFile
MoveFileA
GetModuleFileNameA
SetLastError
GetFileAttributesA
GetSystemDirectoryA
WinExec
GetCurrentProcess
VirtualAllocEx
OpenProcess
LeaveCriticalSection
lstrlenA
GetVersionExA
DeviceIoControl
GetShortPathNameA
GetLocalTime
GetTickCount
MapViewOfFile
CreateFileMappingA
HeapFree
GetProcessHeap
HeapAlloc
UnmapViewOfFile
LocalAlloc
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalSize
GetStartupInfoA
CreatePipe
DisconnectNamedPipe
TerminateProcess
PeekNamedPipe
WaitForMultipleObjects
GetSystemInfo
GlobalMemoryStatus
ExitThread
ReleaseMutex
OpenEventA
SetErrorMode
CreateMutexA
SetUnhandledExceptionFilter
GetCurrentThreadId
RaiseException
InterlockedExchange
strstr
_CxxThrowException
memcmp
strchr
malloc
strcpy
strcmp
free
_except_handler3
strrchr
strcat
strncpy
strncmp
sprintf
atoi
strlen
_snprintf
printf
wcscpy
strtok
strncat
realloc
wcstombs
_beginthreadex
calloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_ftol
ceil
memmove
__CxxFrameHandler
memcpy
_errno
??3@YAXPAX@Z
_strupr
_strnicmp
_strrev
_strnset
memset
??2@YAPAXI@Z
_strcmpi
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICSeqCompressFrame
ICSeqCompressFrameEnd
ServiceMain
aaaa
bbbb
main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ