DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
Behavioral task
behavioral1
Sample
f30a2420bbb8a49fe94a23d65e9eea8bb665e75fd6aefbe5b657339476b3a377.dll
Resource
win7-20220901-en
Target
f30a2420bbb8a49fe94a23d65e9eea8bb665e75fd6aefbe5b657339476b3a377
Size
127KB
MD5
e465a596cc740aa5622a7d2bd13a9892
SHA1
ed243538ac9c33dc47c8c6a8db722cdf67123f03
SHA256
f30a2420bbb8a49fe94a23d65e9eea8bb665e75fd6aefbe5b657339476b3a377
SHA512
56d04638601d0648f7ad739210c733b8cdfc6ca29e7dac298be6494bc063ccba871ccf33b24a79b244ee4d8dd44df6de8254544d619aac004d4767f111cba1bb
SSDEEP
3072:sWykNV/HI+aUpG6WzKye8Qltwd5OhhdN5uD:VyEzRQ6Wz9zQ3wOBN4D
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
FreeSid
capCreateCaptureWindowA
DnsQuery_A
BitBlt
abs
NetUserDel
CoInitialize
EnumProcesses
SHFileOperationA
SHDeleteKeyA
IsWindow
MessageBoxA
CreateEnvironmentBlock
FtpOpenFileA
send
WTSFreeMemory
DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ