DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
4ec9084090a63c0335230c7dee8c0aec.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ec9084090a63c0335230c7dee8c0aec.dll
Resource
win10v2004-20231215-en
Target
4ec9084090a63c0335230c7dee8c0aec
Size
18KB
MD5
4ec9084090a63c0335230c7dee8c0aec
SHA1
0208d329e9af077b9d3154f6778b7c92b07d2367
SHA256
7fb6b38b34d9e7d9269a2a543dfc03565e3fdfc266b9808a3d06b5a74e817a31
SHA512
7e9ef9cde0c18ce81d0c25e52a21eb0dec2e7c13b583bacef0a2cbc4c62a3c21be3ac216958b0722883d523bb88c87c2154574bb7d921cfc3bc43f7261b515fb
SSDEEP
384:on0gwBlAs4ZXXiTRjR/jHVeeLfgPqc+urDZRQcNtr:on0bfAdJXWL/zV7kCBuffJ
Checks for missing Authenticode signature.
resource |
---|
4ec9084090a63c0335230c7dee8c0aec |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocalTime
GetProcAddress
LoadLibraryA
GetLastError
DeleteFileA
GetSystemDirectoryA
TerminateThread
SetThreadPriority
GetTempPathA
GetModuleFileNameA
DisableThreadLibraryCalls
FatalAppExitW
ExpandEnvironmentStringsA
EnumSystemLanguageGroupsA
EnumSystemCodePagesW
VirtualAlloc
VirtualFree
Sleep
CreateFileA
WriteFile
CloseHandle
CreateThread
CreateProcessA
GetDC
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
CloseServiceHandle
OpenServiceA
DeleteService
OpenSCManagerA
ControlService
strrchr
strlen
memcpy
_except_handler3
sprintf
strcat
memset
strcpy
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ