ServiceRouteEx
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
298f1e5342e9e64fa9aa47b073fca56f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
298f1e5342e9e64fa9aa47b073fca56f.dll
Resource
win10v2004-20231222-en
Target
298f1e5342e9e64fa9aa47b073fca56f
Size
15KB
MD5
298f1e5342e9e64fa9aa47b073fca56f
SHA1
43e6a7e81490eee47023611d5018817dc4288867
SHA256
d29f56fb0bf702e766ed02b3f3db59328c94929057d74077290005831f9396f1
SHA512
f8a4fb2d2929d65503208605a0d081b1fcd83872929b2303efdf836817071db5c3dd1176a65798009d34af904be4ea7437d74a81c52b8b0d1b80520ee9479912
SSDEEP
384:+8lsN6TqQISyrgyWixTuBBQARQkSPhELxS:+81yrWixSBBQARQkZS
Checks for missing Authenticode signature.
resource |
---|
298f1e5342e9e64fa9aa47b073fca56f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gethostname
closesocket
RtlZeroMemory
memcmp
memcpy
strlen
strstr
ReadFile
GetSystemDirectoryA
GetPrivateProfileStringA
EnterCriticalSection
DeleteCriticalSection
WritePrivateProfileStringA
GetCommandLineA
lstrcpyA
lstrcmpiA
lstrcmpA
WaitForSingleObject
TerminateThread
Sleep
LeaveCriticalSection
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
CreateThread
VirtualProtectEx
lstrcatA
lstrlenA
InitializeCriticalSection
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
ServiceRouteEx
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ