gandiao
ungandiao
Static task
static1
Behavioral task
behavioral1
Sample
97177289f4f3302099786e55aa45c612767dfccd115310aca694427bf92c99cd.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
97177289f4f3302099786e55aa45c612767dfccd115310aca694427bf92c99cd.dll
Resource
win10v2004-20220812-en
Target
97177289f4f3302099786e55aa45c612767dfccd115310aca694427bf92c99cd
Size
24KB
MD5
2fb4686c2e5820504495d5c11c3a0e87
SHA1
831202274425265bb6fef9ccee0b62face5b84e2
SHA256
97177289f4f3302099786e55aa45c612767dfccd115310aca694427bf92c99cd
SHA512
54fdba7df580a013fca77ef5274cbbd950a99c20ec2a3fcaa6e296c9beeb7ad8935cf79af8bb4d313e71e4e0ba135eaadadb801d5b9c82635afaa0e844c0df47
SSDEEP
192:+qSc1jruJq+ZoPK4FOEhWXCAP/4HjHUsZ3lYa:+a8q9FOE3HTUw
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
CreateEventA
DuplicateHandle
GetCurrentProcess
FreeResource
WriteFile
SizeofResource
CreateFileA
LockResource
LoadResource
FindResourceA
GetSystemDirectoryA
lstrcmpiA
DeviceIoControl
Sleep
Process32Next
OpenProcess
GetLastError
GetProcessHeap
HeapAlloc
lstrcpynA
CloseHandle
HeapFree
TerminateProcess
MessageBoxA
StartServiceA
ControlService
DeleteService
OpenProcessToken
GetTokenInformation
LookupAccountSidA
OpenServiceA
CreateServiceA
OpenSCManagerA
CloseServiceHandle
strstr
strcat
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlEqualUnicodeString
NtQueryObject
NtQuerySystemInformation
strcmp
_strlwr
free
_initterm
_adjust_fdiv
malloc
printf
gandiao
ungandiao
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ