InsertSvc
ServiceMain
UninstallSvc
Static task
static1
Behavioral task
behavioral1
Sample
4da247fcc83eebd04789053ea204fb46c0c732ff2d77c94c4fe4b32ef847b70d.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4da247fcc83eebd04789053ea204fb46c0c732ff2d77c94c4fe4b32ef847b70d.dll
Resource
win10v2004-20230703-en
Target
4da247fcc83eebd04789053ea204fb46c0c732ff2d77c94c4fe4b32ef847b70d
Size
48KB
MD5
99eddcdb6ee5b3257e780573aaf71285
SHA1
c16830ad2876a6725a8af424f730fc2dfd97dabc
SHA256
4da247fcc83eebd04789053ea204fb46c0c732ff2d77c94c4fe4b32ef847b70d
SHA512
be516985da157a61471d341900f2fa4707ac3c21d51bf0344dfd59ee5291c89300214fe70f2cb9aa41cf4545e17f7e0d181da4388806fb11c9ecfeb7d0c2f47c
SSDEEP
768:GbMmx6nbAsPAtLOpNnnaQFBeWs0zDY7qUq:GAmx6nbAsPvjb3ejADADq
Checks for missing Authenticode signature.
resource |
---|
4da247fcc83eebd04789053ea204fb46c0c732ff2d77c94c4fe4b32ef847b70d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
CreateServiceA
RegCreateKeyExA
RegSetValueExA
WideCharToMultiByte
LocalFree
WTSGetActiveConsoleSessionId
GetNativeSystemInfo
GetModuleHandleA
GetProcAddress
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
FreeLibrary
LocalAlloc
LCMapStringA
CreateThread
OpenProcess
LoadLibraryA
WTSSendMessageA
atoi
sprintf
qsort
strchr
free
malloc
modf
??3@YAXPAX@Z
memmove
strncmp
__CxxFrameHandler
_ftol
wsprintfA
MessageBoxA
InsertSvc
ServiceMain
UninstallSvc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ