gytfredwse
ServiceMain
qwaszxerd
Static task
static1
Behavioral task
behavioral1
Sample
415dc0d589464ad1ce5ee26b0863612b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
415dc0d589464ad1ce5ee26b0863612b.dll
Resource
win10v2004-20231215-en
Target
415dc0d589464ad1ce5ee26b0863612b
Size
43KB
MD5
415dc0d589464ad1ce5ee26b0863612b
SHA1
d1bb11f0c68b491529c1a772c98d3566231cc36a
SHA256
6d9bde0bd30135e2fecedf1a1161f527cfa478696db17c39b7812f4197a7fa4e
SHA512
cb132ef805c31dc0f14d81fc2cda52085e605956bd9d5b271d601fa497a4cb86d11c99f3ddee345320ce14d61e12f5a6b3d96f7f063803f367e33f114bac7d0e
SSDEEP
768:+5zJyCCyyxcdtpciAP8nenkVE1G9C8XHoSUSLhFdjT5CcCX:+5z7CdepDjnenkVEskwIJSLhHT8rX
Checks for missing Authenticode signature.
resource |
---|
415dc0d589464ad1ce5ee26b0863612b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetModuleFileNameExA
ExitWindowsEx
malloc
ShellExecuteA
StrCmpW
listen
ImmReleaseContext
DeleteObject
RegCloseKey
capCreateCaptureWindowA
CreateStreamOnHGlobal
waveInUnprepareHeader
gytfredwse
ServiceMain
qwaszxerd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE