DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
W32TimeSyncNow
W32TmServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1787aa511874073835bd1d56f18d0476403f63ff640a0b3401cbf95886aeb3bc.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1787aa511874073835bd1d56f18d0476403f63ff640a0b3401cbf95886aeb3bc.dll
Resource
win10v2004-20230831-en
Target
1787aa511874073835bd1d56f18d0476403f63ff640a0b3401cbf95886aeb3bc
Size
79KB
MD5
f010dacd94cf59c8fee92ce1e0ffad0f
SHA1
73f6e3d5b03aa0e839e9a53559c020ad06ad00c4
SHA256
1787aa511874073835bd1d56f18d0476403f63ff640a0b3401cbf95886aeb3bc
SHA512
cd77c48e5a00a89631f8d19ec863c34c204a60f958eafdfd92b4c83af436f10795cf803fc47eaf03d9f9566addf84ac6e5a7e632cb5c48f3a70f5d1c2a32d1d7
SSDEEP
768:WTZ8sFXgHZmOMfd6GvgBOoY+6cAdvz3xOp1bnHMgm2elga75t5C3jKx1+ZzBCUnh:WH5z3xyHMYeeaXdwJOsconYvoS8
Checks for missing Authenticode signature.
resource |
---|
1787aa511874073835bd1d56f18d0476403f63ff640a0b3401cbf95886aeb3bc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DbgPrint
AdjustTokenPrivileges
ChangeServiceConfig2W
CloseServiceHandle
CreateServiceW
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegisterServiceCtrlHandlerW
SetServiceStatus
CloseHandle
CreateEventW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FileTimeToSystemTime
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetEvent
SetSystemTime
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
memmove
memset
strncmp
vfprintf
wcslen
wcsncpy
WSACleanup
WSAStartup
gethostbyname
htons
ntohl
recvfrom
select
sendto
socket
LoadStringW
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
W32TimeSyncNow
W32TmServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ