ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
12e479e32e287503620b1ef5bad9140e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12e479e32e287503620b1ef5bad9140e.dll
Resource
win10v2004-20231215-en
Target
12e479e32e287503620b1ef5bad9140e
Size
17KB
MD5
12e479e32e287503620b1ef5bad9140e
SHA1
7b8666b1dbbbce10f41042c9eeb7feceb988b087
SHA256
e6bfcbf5733e885aabc765b7868339c04cb0e7c2bf9e8bb581afe3da6aef35ee
SHA512
8639d0e6a78e5beeeca3894ea434c5f8b5bb539d6f1f24a6b9524d7231032e9a5d9868e1b8544cbd32b1dfe90f028b9b9ff2576402ecc957f202fb99b560083f
SSDEEP
384:SCwgHhodav/XwONuBBQARQkObJtiLb+HeB:RLSdavvTgBBQARQkObmLb+Hq
Checks for missing Authenticode signature.
resource |
---|
12e479e32e287503620b1ef5bad9140e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strstr
strlen
memcpy
memcmp
RtlZeroMemory
RtlUnwind
closesocket
gethostname
InternetReadFile
InternetOpenA
InternetCloseHandle
GlobalAlloc
VirtualProtectEx
VirtualFree
VirtualAlloc
ReadFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcmpA
lstrcpynA
lstrcpyA
lstrcmpiA
WaitForSingleObject
TerminateThread
Sleep
IsBadReadPtr
CreateThread
lstrlenA
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GlobalFree
lstrcatA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ