SchedServiceMain
ServiceMain
SvchostEntry_W32Time
Behavioral task
behavioral1
Sample
8051303a16878e068faef2595f122ce4e167da66eae2012c712c141832b65a79.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8051303a16878e068faef2595f122ce4e167da66eae2012c712c141832b65a79.dll
Resource
win10v2004-20221111-en
Target
8051303a16878e068faef2595f122ce4e167da66eae2012c712c141832b65a79
Size
355KB
MD5
ad7a5fc865f2265b38b8e6b5be680470
SHA1
d8bf613cd30d2869cf33c4c34b71b50d3121c861
SHA256
8051303a16878e068faef2595f122ce4e167da66eae2012c712c141832b65a79
SHA512
93b730d6b43d8742e16014f9b4a59bca983e78b3d474e54c4384c534d45b8d50d0985354d767e44ba952029d33febd3462f83a379039eaf8cd29743e38b61727
SSDEEP
6144:3nimXbtkXwBeg7o2wVM06kESluX91mnkSDZdnOzce6thZ5oGJv:3dCLESK91mkS91Of6t9oS
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sleep
GetTickCount
GetLongPathNameA
GetTempPathA
SetThreadPriority
CreateThread
GetModuleFileNameA
GetLocalTime
GetLastError
CreateEventA
OpenProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CreateRemoteThread
GetModuleHandleA
OutputDebugStringA
CopyFileA
DeleteFileA
GetSystemDirectoryW
GetStartupInfoA
GetModuleFileNameW
WriteFile
IsBadWritePtr
LockResource
SizeofResource
LoadResource
FindResourceA
DeviceIoControl
CreateFileW
DuplicateHandle
LoadLibraryExA
FreeLibrary
GetVersionExA
SetFilePointer
GetFileSize
MoveFileExA
MoveFileA
SetEndOfFile
SetFileAttributesA
InterlockedExchange
CreateProcessA
WaitForSingleObject
CloseHandle
LoadLibraryA
InitializeCriticalSection
GlobalAlloc
GlobalFree
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
IsDebuggerPresent
lstrcmpiW
ExitProcess
VirtualQuery
SetServiceStatus
AdjustTokenPrivileges
CloseServiceHandle
RegSetValueExA
RegQueryValueExA
RegCloseKey
ControlService
DeleteService
OpenSCManagerA
OpenServiceA
CreateServiceA
StartServiceA
RegOpenKeyExA
RegCreateKeyExA
RegisterServiceCtrlHandlerW
LookupPrivilegeValueA
RtlInitUnicodeString
RtlUnwind
_strcmpi
NtQuerySystemInformation
NtQueryObject
RtlEqualUnicodeString
wsprintfW
wsprintfA
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE