InstallService
RundllInstall
RundllUninstall
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
b74309856ed54f16f39f7091855ea21525d3bd8664878d9aa307a40b4963b822.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b74309856ed54f16f39f7091855ea21525d3bd8664878d9aa307a40b4963b822.dll
Resource
win10v2004-20220812-en
Target
b74309856ed54f16f39f7091855ea21525d3bd8664878d9aa307a40b4963b822
Size
196KB
MD5
a86bfb1b631ab0978a3c57d3554521f0
SHA1
b4944e5a4984f9e14cbb4ac1ee3148debe4f67cf
SHA256
b74309856ed54f16f39f7091855ea21525d3bd8664878d9aa307a40b4963b822
SHA512
839c7032d83c029fc4b09b56d595a7dfa88e00f83654b4450cc987fe4d37aea2cd47a34ae90698760520f5793ccbeea31a42b4f0afaa7640b21f64faba6570db
SSDEEP
3072:9ie5Eg591GcGgC/467prHqrI2PiW1ezJIQUxII8CeQgS5NtAFzM5:9PG3gC/4SHqr7yIQ9T/QgS50zg
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RegCreateKeyA
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
QueryServiceStatus
ControlService
StartServiceA
CreateServiceA
OpenProcessToken
RegOpenKeyA
RegEnumKeyA
RegCreateKeyExA
RegDeleteKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
CharLowerBuffW
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
SHGetFolderPathA
DeleteCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
MultiByteToWideChar
TerminateProcess
CreateThread
TerminateThread
CloseHandle
GetVersionExA
CreateProcessA
CreateToolhelp32Snapshot
Process32First
GetLastError
Process32Next
SetLastError
OpenProcess
GetModuleFileNameA
Sleep
OpenMutexA
CreateMutexA
WaitForSingleObject
ReleaseMutex
ReadProcessMemory
GetCurrentProcess
VirtualQueryEx
WriteProcessMemory
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
WriteFile
GetStdHandle
LoadLibraryA
HeapSize
GetFileAttributesA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
SetFilePointer
ReadFile
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
SetStdHandle
GetLocaleInfoW
GetExitCodeProcess
WriteConsoleA
GetConsoleOutputCP
InstallService
RundllInstall
RundllUninstall
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ