ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
087935d19eb9e2b78a098f586fd8c01c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
087935d19eb9e2b78a098f586fd8c01c.dll
Resource
win10v2004-20231215-en
Target
087935d19eb9e2b78a098f586fd8c01c
Size
15KB
MD5
087935d19eb9e2b78a098f586fd8c01c
SHA1
dad2d208b83de65bec5fe6eaa821c6abb430ccce
SHA256
d7c27efdb5d815a4077185fb97106abaaa3f6c94b27f73cfcc07a714bfc9806d
SHA512
360aa219a1a32c4a023ff0ae370fb69f4c6a95401fcb391286a4649755d190e33bd3f7dd0c5b8ca6565bbab9ad763729e884757f6df4da671bdbd7e7004f0752
SSDEEP
192:DudzsowGPMd34neO/S9j2uZL+JFBuBBQ6PRQkszPuDC8reynN:8sUPMdGeOW2dJTuBBQARQk8PuDCByN
Checks for missing Authenticode signature.
resource |
---|
087935d19eb9e2b78a098f586fd8c01c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strstr
strlen
memcpy
memcmp
RtlZeroMemory
closesocket
gethostname
ReadFile
Sleep
IsBadReadPtr
GetSystemDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateThread
lstrcmpA
lstrcpynA
lstrcpyA
lstrcmpiA
WritePrivateProfileStringA
WaitForSingleObject
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
lstrlenA
VirtualProtectEx
lstrcatA
TerminateThread
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
wsprintfA
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ