Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1ca4836cdfb5ac9a57cac35a0de799f2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ca4836cdfb5ac9a57cac35a0de799f2.dll
Resource
win10v2004-20231222-en
Target
1ca4836cdfb5ac9a57cac35a0de799f2
Size
39KB
MD5
1ca4836cdfb5ac9a57cac35a0de799f2
SHA1
c89e1f0ae2767ca16a9163e533fc797e393b0d6c
SHA256
9419256330aafe3920c5bd3adf3df2314459d61945a0eedc8d81875cc7f44944
SHA512
2786655404f9cb67eeabae7d9a4cc3f062b0e6026c6892072833fdf0ee39007c89fb0d5f420385372599a184acb33156f57088dc6de4e4e468970676e162dac2
SSDEEP
768:4DzYNgxWST/t7FAJI8lS2u6NiHwqhG/MdpelYCX0FvM/Ki:4DzMST/t7aPoHthG0beZgvM/Ki
Checks for missing Authenticode signature.
resource |
---|
1ca4836cdfb5ac9a57cac35a0de799f2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
listen
IsWindow
CreateStreamOnHGlobal
BitBlt
StrChrA
ShellExecuteA
GetModuleFileNameExA
capCreateCaptureWindowA
waveInStop
RegCloseKey
free
ImmGetContext
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE