ServiceMain
222222222222
Qy001DoMainWSSK
Static task
static1
Behavioral task
behavioral1
Sample
02ef0715ecc95a6af65880ed293a4b3e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02ef0715ecc95a6af65880ed293a4b3e.dll
Resource
win10v2004-20231215-en
Target
02ef0715ecc95a6af65880ed293a4b3e
Size
38KB
MD5
02ef0715ecc95a6af65880ed293a4b3e
SHA1
1d1f0f9855f9a98a570a78de1d860e79c5886624
SHA256
883d3c447463aa56bd9014e7251810e15c3b5f83c5ed2f08893f8ff1c5158af6
SHA512
6cdf034462a90052d8d765e5c7114037feb90c7d00fb3e60284b6be94aaacf1f0f0efa097511c9cdd320da26dbf251bcf2e90ae73b907b3d11edf09a0fea2b98
SSDEEP
768:TRkhX5BZQopiloj8TRDRQUjY+u4p6v7A2jVFNC/bOPZh/mNGG6X0Qvt19:TCX5BZnh8TcUjQog82hHC/0ZhVvt19
Checks for missing Authenticode signature.
resource |
---|
02ef0715ecc95a6af65880ed293a4b3e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleFileNameExA
ShellExecuteA
ImmGetContext
waveInStop
IsWindow
CreateStreamOnHGlobal
BitBlt
listen
StrChrA
RegCloseKey
capCreateCaptureWindowA
free
ServiceMain
222222222222
Qy001DoMainWSSK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE