guocyok888
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3adce91c7bdd037991855f8f3ff6446e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3adce91c7bdd037991855f8f3ff6446e.dll
Resource
win10v2004-20231222-en
Target
3adce91c7bdd037991855f8f3ff6446e
Size
44KB
MD5
3adce91c7bdd037991855f8f3ff6446e
SHA1
5a28d8252965b09c303eeae0df256263410797e1
SHA256
d3d6ccb7fa9066214d930cd1be49a488df25020b817e18aecbf9885eb9581a7c
SHA512
aa79eab6e9afb8f522c93259ab72e083d874879b7d431eaf0e2cab37a2dfb6f00aeea982bf03c90c9e073df29de427a4162388002300fecb665b1d9537142e4c
SSDEEP
768:A4zBdsluj42UQVDb9HBReuYUrapvNDeuY4/pIfptVWUYfX0XiVjgL:9zBdslj2Rtc1aUhY1W97S
Checks for missing Authenticode signature.
resource |
---|
3adce91c7bdd037991855f8f3ff6446e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleFileNameExA
capCreateCaptureWindowA
ImmGetContext
waveInStop
free
ShellExecuteA
IsWindow
StrCmpW
BitBlt
RegCloseKey
CreateStreamOnHGlobal
listen
guocyok888
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE