DllCanUnloadNowW
DllRegisterServerW
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
9ea2dfd9d74b180baa2973b43713f176241c4f444603af37c69712f698540313.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ea2dfd9d74b180baa2973b43713f176241c4f444603af37c69712f698540313.dll
Resource
win10v2004-20221111-en
Target
9ea2dfd9d74b180baa2973b43713f176241c4f444603af37c69712f698540313
Size
4KB
MD5
192dea3692ce994de150c7d6b54816da
SHA1
ec821698eab0fb56aaf08e354b11528734e79a64
SHA256
9ea2dfd9d74b180baa2973b43713f176241c4f444603af37c69712f698540313
SHA512
4ecef49c30bd94732b055614e14c9c4db3fec0507c9dd61a4f39b72438dda7c22157b33df06e6415bf7abbce980308392180bd4cac58e6bbb31d132e2796b5e5
SSDEEP
48:q7m4jD4CXwZDL0OhSh6Bfdn2V4XLXYUXLXvrk7cDpztU/ta:AHP9ek6+OnDo7cDltU/ta
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
HeapFree
FreeLibrary
GetModuleFileNameA
CreateEventA
CloseHandle
OpenEventA
CreateThread
FreeConsole
LoadLibraryA
Sleep
GetProcAddress
SetServiceStatus
RegisterServiceCtrlHandlerW
DllCanUnloadNowW
DllRegisterServerW
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ