DoMainWork
DoService
ServiceMain
Behavioral task
behavioral1
Sample
d364b556c1183afcf59968a4ff16ee151820e519fe348a1b995cd280b3ec1bf5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d364b556c1183afcf59968a4ff16ee151820e519fe348a1b995cd280b3ec1bf5.dll
Resource
win10v2004-20220901-en
Target
d364b556c1183afcf59968a4ff16ee151820e519fe348a1b995cd280b3ec1bf5
Size
312KB
MD5
460ce9c5c762a047ebb310af74e87852
SHA1
3e0745804c3d7d3935a2539fb011a3dba80b6704
SHA256
d364b556c1183afcf59968a4ff16ee151820e519fe348a1b995cd280b3ec1bf5
SHA512
4cacc31b3b074b301dfe4c02851c3db82232e8df344e2ffc852d54ee682964fe5b48c2900f91b301a8b2770e484149b49087d78b3770c2fbcaa582fa75f8d577
SSDEEP
6144:LW+1Be3ty1z19lvVkyHddSkhbTOBAt6zX9c/7s912DH3U7Or5LaXE:CoEcJTvVH9EMbTOBAto9kI0k7OrVuE
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CharUpperA
MessageBoxA
DeleteDC
RegQueryValueExA
ShellExecuteA
CreateStreamOnHGlobal
closesocket
SHDeleteKeyA
GetModuleFileNameExA
ImmGetCompositionStringA
capGetDriverDescriptionA
waveInUnprepareHeader
_beginthread
OpenMutexA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ