ServiceMain
wcslen
Static task
static1
Behavioral task
behavioral1
Sample
db14093b92f5c0a6c2273b67f308665fb6915433cc7ebeaf3ee9a34f25cd5176.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db14093b92f5c0a6c2273b67f308665fb6915433cc7ebeaf3ee9a34f25cd5176.dll
Resource
win10v2004-20221111-en
Target
db14093b92f5c0a6c2273b67f308665fb6915433cc7ebeaf3ee9a34f25cd5176
Size
23KB
MD5
9525961ffcfaffa41786eee389ad708c
SHA1
cc5f3cf9155f7c74486102898c7cc8652836935e
SHA256
db14093b92f5c0a6c2273b67f308665fb6915433cc7ebeaf3ee9a34f25cd5176
SHA512
46facaa075233bf6a55416d8c558adaa58a33cf1d3512aedf59d4b6ac256739f33f23b058827e36916560b0609551900d8ea0c3b329c743d172594c571582449
SSDEEP
384:VLniC5ko5dEAI6cfn8MUKXmTMHxZKM2e8IlPAAnykI2/uY6gcUIuPuLUBVoWvwWk:NT55RI6c/83TUOJkI2mYXIuPuQzZE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FreeLibrary
GetModuleHandleA
ExitThread
DeleteFileA
GlobalFree
GetTempPathA
CreateDirectoryA
LockResource
SizeofResource
LoadResource
FindResourceA
DeviceIoControl
Process32Next
ExpandEnvironmentStringsA
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetCurrentProcessId
CreateEventA
lstrcmpiW
DuplicateHandle
OpenProcess
LoadLibraryExA
GlobalMemoryStatusEx
GetVersionExA
GetCurrentProcess
CreateRemoteThread
WriteProcessMemory
CreateNamedPipeA
Sleep
ConnectNamedPipe
GetLastError
ReadFile
LoadLibraryA
GetProcAddress
InterlockedExchange
GetModuleFileNameA
CreateFileA
GetFileSize
CloseHandle
GetTickCount
MoveFileA
MoveFileExA
CopyFileA
SetFilePointer
GlobalAlloc
WriteFile
CreateThread
Process32First
lstrcmpiA
wsprintfW
wsprintfA
CreateProcessAsUserA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegisterServiceCtrlHandlerW
SetServiceStatus
CreateServiceA
RegCreateKeyExA
RegSetValueExA
StartServiceA
QueryServiceStatus
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
SetTokenInformation
DuplicateTokenEx
OpenProcessToken
closesocket
gethostbyname
inet_addr
WSAStartup
setsockopt
getsockopt
connect
htons
socket
send
gethostname
recv
ServiceMain
wcslen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ