Install
RunInstall
RundllUninstall
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
6f13c3058ea326721815a9f83b71e95e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6f13c3058ea326721815a9f83b71e95e.dll
Resource
win10v2004-20231215-en
Target
6f13c3058ea326721815a9f83b71e95e
Size
77KB
MD5
6f13c3058ea326721815a9f83b71e95e
SHA1
1d0ca492d5a90993060440db83cd045b82c721c8
SHA256
17d03bba89d7f7725e7e2c19834b7317f3b3b17cd9c0486deb6151b3a7f0f2c0
SHA512
a5b50bb855213ae63c20f52ac4cc241c429313d96f25319746af6d3fc228370b7103e6bda43e15f5be4dbc5cbb19c075ac3b8c01ddd6792bae9d1f3963a5ec35
SSDEEP
1536:Ql4Ol0PGc4R8Pv4Dw1yUpbQFnToIfxgY0r5ZmNiTJbV:Forc4RA8w1yUpbQtTBfxgY0r5ZmNiTJp
Checks for missing Authenticode signature.
resource |
---|
6f13c3058ea326721815a9f83b71e95e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
GetSystemDirectoryA
CloseHandle
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
lstrlenA
lstrcpyA
WaitForSingleObject
MoveFileExA
SetThreadPriority
ExitProcess
FreeConsole
GlobalMemoryStatus
InterlockedExchange
HeapAlloc
GetCurrentThreadId
GetLastError
RaiseException
LocalAlloc
__CxxFrameHandler
_CxxThrowException
_except_handler3
atoi
strcspn
strstr
??3@YAXPAX@Z
wcstombs
rand
srand
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
_adjust_fdiv
??2@YAPAXI@Z
strncpy
sprintf
strncat
_strlwr
Install
RunInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ