EntryPoint
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b98176947afc8040772e205f0ea14e3141328eebfb15bfd62617124954247bd7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b98176947afc8040772e205f0ea14e3141328eebfb15bfd62617124954247bd7.dll
Resource
win10v2004-20220901-en
Target
b98176947afc8040772e205f0ea14e3141328eebfb15bfd62617124954247bd7
Size
33KB
MD5
25d4e21d76e8335c3ad84352bd30a571
SHA1
b722d2eec820a7688f660daa2bc7e43c62569268
SHA256
b98176947afc8040772e205f0ea14e3141328eebfb15bfd62617124954247bd7
SHA512
50ce68db37129cc32cd3b0a2939d3f256ee8172955fa2a730aaaa9275c5d992b6ae80b9873fd4808f608d1d0ef382e511b6e7a4f27f95bf50ddf9cbb5562fece
SSDEEP
384:LFVawHuWTU75TVoVkWSlw94r2RNZ2xe1PuE04YA+xUKFI8eGV90vyUyZK1:LC1TF694rquxrE0tzbJZQ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
SetServiceStatus
RegCreateKeyExA
RegisterServiceCtrlHandlerA
RegCloseKey
StrChrA
wnsprintfA
StrStrIA
HeapAlloc
HeapFree
CloseHandle
GetLastError
OpenProcess
SetLastError
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrlenA
InterlockedExchange
GetEnvironmentVariableA
WideCharToMultiByte
lstrlenW
InterlockedCompareExchange
CreateRemoteThread
ReadProcessMemory
WriteProcessMemory
Sleep
VirtualAllocEx
lstrcpynA
GetCommandLineA
CreateProcessA
lstrcatA
lstrcpyA
HeapCreate
TranslateMessage
PeekMessageA
CreateWindowExA
RegisterClassExA
DispatchMessageA
DefWindowProcA
GetProcessImageFileNameA
EntryPoint
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ