gytfredwse
ServiceMain
rftgyhujk
Static task
static1
Behavioral task
behavioral1
Sample
40534924dd52f388dbf7176a0e9befaa.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
40534924dd52f388dbf7176a0e9befaa.dll
Resource
win10v2004-20231215-en
Target
40534924dd52f388dbf7176a0e9befaa
Size
45KB
MD5
40534924dd52f388dbf7176a0e9befaa
SHA1
c48199cc7b38978f64d5d3570f1939dc3d347e07
SHA256
7a2554a31e4c41fa23fd8d6c54d614279f7e948b844b20d68d5805f11ae1297d
SHA512
fe77e75a1dc6906f331db2df2a07ac61b8811d6b13777211fbe75bc91abbe3d0f78b6cdd2308e5baaa9008e9c6400f20a93e9c4330cc309623e94ec386db531d
SSDEEP
768:g9scwe0+IXX4g55qDahSR9hs7wBSiqDo3MLCw0jc8CGLkedLcBYZ/WFVD4n2JMDo:g9sC0fJLH7wBSno36Cw01CGLxdLcc+Dl
Checks for missing Authenticode signature.
resource |
---|
40534924dd52f388dbf7176a0e9befaa |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ShellExecuteA
GetModuleFileNameExA
capCreateCaptureWindowA
CreateStreamOnHGlobal
waveInStop
free
RegCloseKey
SetTimer
listen
StrCmpW
ImmGetContext
BitBlt
gytfredwse
ServiceMain
rftgyhujk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE