StartServiceEx
StopServiceEx
_ServiceRouteEx@12
Static task
static1
Behavioral task
behavioral1
Sample
109603b8160b84cd35db81c2efc3e8db.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
109603b8160b84cd35db81c2efc3e8db.dll
Resource
win10v2004-20231215-en
Target
109603b8160b84cd35db81c2efc3e8db
Size
24KB
MD5
109603b8160b84cd35db81c2efc3e8db
SHA1
df1f7c45d061db6584ea49fb08bc5bdfe212c61f
SHA256
f9e288353474f6a09c80650f5254ef76e306613e67ca3ed1029d062dc9aa4fb9
SHA512
1de4b2d0a257a8415d280a9bdfb2fd2eccad4d7715da58545dd0ae49b63c592352b48db7bc7138dc73f936b0aabe2731375490b0be8b69f0748d172b425c8869
SSDEEP
192:I11GYWEKdRHUpwEWCpuBBQ6PRQkX82ZZNn5WnN7iJaSahKOtV:I11gE8HUpBLuBBQARQks2Zv5WRiN0d
Checks for missing Authenticode signature.
resource |
---|
109603b8160b84cd35db81c2efc3e8db |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentDirectoryA
lstrcatA
CloseHandle
ReadProcessMemory
GetModuleFileNameA
CreateThread
VirtualProtect
Sleep
lstrlenA
ExitProcess
CreateWindowExA
ShowWindow
KillTimer
UpdateWindow
DefWindowProcA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetWindowTextA
wsprintfA
SetTimer
GetActiveWindow
RegisterClassA
GetMessageA
send
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
GetAdaptersInfo
memcmp
free
strcmp
strstr
memcpy
fopen
fclose
fwrite
strcat
memset
strcpy
strrchr
strlen
exit
_adjust_fdiv
malloc
_initterm
_strupr
_strlwr
_itoa
StartServiceEx
StopServiceEx
_ServiceRouteEx@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ