ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
2775f9d5e9e1c182300f6090d8c2cd8c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2775f9d5e9e1c182300f6090d8c2cd8c.dll
Resource
win10v2004-20231215-en
Target
2775f9d5e9e1c182300f6090d8c2cd8c
Size
15KB
MD5
2775f9d5e9e1c182300f6090d8c2cd8c
SHA1
631911a689bb4bfe0fa8b24b83b4f4954ce2b707
SHA256
a0022c04b38a2f95f7b45e26c9aefad11f422a95e31403f32f186ca032832cfc
SHA512
07cb3ba80a123a48faf6f39ad990972077244782b449479d1ba385ae8f8d2a50c7e4ee648e00d7690b8b332e18f0d28d8de7cc67f870dd1203f19ab8020e549e
SSDEEP
192:D7zsowGPMd34DGlBD37dvEL+JQuBBQ6PRQksR9PqC8e4/N:TsUPMdO4BDhJQuBBQARQk69PqC4F
Checks for missing Authenticode signature.
resource |
---|
2775f9d5e9e1c182300f6090d8c2cd8c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strstr
strlen
memcpy
memcmp
RtlZeroMemory
closesocket
gethostname
ReadFile
Sleep
IsBadReadPtr
GetSystemDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateThread
lstrcmpA
lstrcpynA
lstrcpyA
lstrcmpiA
WritePrivateProfileStringA
WaitForSingleObject
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
lstrlenA
VirtualProtectEx
lstrcatA
TerminateThread
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
wsprintfA
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ