Domguocyok
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
016bc2cdbba83f3638e53cd76a97e612.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
016bc2cdbba83f3638e53cd76a97e612.dll
Resource
win10v2004-20231215-en
Target
016bc2cdbba83f3638e53cd76a97e612
Size
35KB
MD5
016bc2cdbba83f3638e53cd76a97e612
SHA1
47dc425cb549b2f2ec5afc4e85d53160ec58e865
SHA256
421fb84184f3a15982252d5155a008e5224da2f0ce4242725be0794c66fd863a
SHA512
08a48aab20626a3fccafc5f38bd87c47fd3af5b0307e148fdd615313b8e2e7c32b8c70b02874d3a9614142ed0bf568f22c6fee2c00d845118a6f09563444fb4c
SSDEEP
768:geLCpM+WeebVY8KBO/eXxZYGn5nsLFjqphMVGQT+RzrTX0g:lWYXbW8alaFephMVGQTCTd
Checks for missing Authenticode signature.
resource |
---|
016bc2cdbba83f3638e53cd76a97e612 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
listen
free
capCreateCaptureWindowA
CreateStreamOnHGlobal
GetModuleFileNameExA
waveInStop
ImmGetContext
RegCloseKey
ShellExecuteA
StrCmpW
IsWindow
BitBlt
Domguocyok
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE