ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
eb1f1e497ebbf78e28024abdc501c882f820d0aef0dcd15470ce693f0d885539.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb1f1e497ebbf78e28024abdc501c882f820d0aef0dcd15470ce693f0d885539.dll
Resource
win10v2004-20221111-en
Target
eb1f1e497ebbf78e28024abdc501c882f820d0aef0dcd15470ce693f0d885539
Size
17KB
MD5
0d81fddb4d184dc2f9d4a1f2bb5425a2
SHA1
3d22225a7052e9acd9ccac8d2bdea0072eb6d51d
SHA256
eb1f1e497ebbf78e28024abdc501c882f820d0aef0dcd15470ce693f0d885539
SHA512
7adda4c612dcc35d36f9ceaf2c7a289255bdb9f7beeae7a599edcdd42b40e39ca78d0a2ba6be1c802fefc0678be63d5323847616ef6f62630fee94bcc96b3512
SSDEEP
384:BSjGkgbQ8WOYIVw4NuBBQARQklUyZAAAN:B6g3YWoBBQARQkhC
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
strstr
strlen
memcpy
memcmp
RtlZeroMemory
closesocket
gethostname
ReadFile
OutputDebugStringA
LeaveCriticalSection
InitializeCriticalSection
GetLocalTime
IsBadReadPtr
GetPrivateProfileStringA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
WaitForSingleObject
TerminateThread
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
MultiByteToWideChar
EnterCriticalSection
VirtualProtectEx
lstrcatA
lstrlenA
CreateThread
DeleteCriticalSection
Sleep
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ