DoMainWork
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
27a3bc03a839e411e231b51e73bb639b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27a3bc03a839e411e231b51e73bb639b.dll
Resource
win10v2004-20231215-en
Target
27a3bc03a839e411e231b51e73bb639b
Size
130KB
MD5
27a3bc03a839e411e231b51e73bb639b
SHA1
4e6eb8096474c45c8f17c35db218b8b3592fe403
SHA256
cb9135a1aa03e9a53e04260ef8367f460b3600b104e5528b36c0faeb8c6a095a
SHA512
bc9fd531fddd04b0e59e9fc6c1c0b5e5b486e30abf3a4e4f1a995347806bf1cfe68afe521507dc098378f863773d28c696dfb000edc537ce3a6aa1acdbbcd54f
SSDEEP
3072:nq6EcbQogb8hBhghkuG7jRqbx4ETazeavW9cS6CDy:nq6E3QU3G7jRkRTaR+9cSTe
Checks for missing Authenticode signature.
resource |
---|
27a3bc03a839e411e231b51e73bb639b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
capCreateCaptureWindowA
DeleteObject
ImmReleaseContext
lstrcatW
GetModuleHandleA
GetProcAddress
VirtualProtect
malloc
GetModuleFileNameExA
ShellExecuteA
StrCmpW
ExitWindowsEx
waveInUnprepareHeader
listen
CreateStreamOnHGlobal
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ