DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
170a613c01dc625fdca3c6d2d4dc3cc2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
170a613c01dc625fdca3c6d2d4dc3cc2.dll
Resource
win10v2004-20231215-en
Target
170a613c01dc625fdca3c6d2d4dc3cc2
Size
18KB
MD5
170a613c01dc625fdca3c6d2d4dc3cc2
SHA1
499e2c416eb4210fe4e8e62d6854ebcf3aba5a62
SHA256
26a7be9e5bb6ec40cf682c5f2b840edb8582c6b44b64d27b0641ecfcbae5e86c
SHA512
7a314e4a28138bc1a1a52247e4831f34d94cc1656d9c372cac5361299b74b93ab417381cf0bc3a7e61de9f88e345d8a9983933d681de59aad8a8a41817912ca3
SSDEEP
384:ow0gwBlAs4ZXXiTRSijR/jHVeeLfgPqc+urDZRQcNt7J:ow0bfAdJXWga/zV7kCBufflJ
Checks for missing Authenticode signature.
resource |
---|
170a613c01dc625fdca3c6d2d4dc3cc2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocalTime
GetProcAddress
LoadLibraryA
GetLastError
DeleteFileA
GetSystemDirectoryA
TerminateThread
SetThreadPriority
GetTempPathA
GetModuleFileNameA
DisableThreadLibraryCalls
FatalAppExitW
ExpandEnvironmentStringsA
EnumSystemLanguageGroupsA
EnumSystemCodePagesW
VirtualAlloc
VirtualFree
Sleep
CreateFileA
WriteFile
CloseHandle
CreateThread
CreateProcessA
GetDC
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
CloseServiceHandle
OpenServiceA
DeleteService
OpenSCManagerA
ControlService
strrchr
strlen
memcpy
_except_handler3
sprintf
strcat
memset
strcpy
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ