Terlockend
ServiceDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4fd969a2e3d4a8687ee416b84f30f53b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4fd969a2e3d4a8687ee416b84f30f53b.dll
Resource
win10v2004-20231215-en
Target
4fd969a2e3d4a8687ee416b84f30f53b
Size
63KB
MD5
4fd969a2e3d4a8687ee416b84f30f53b
SHA1
cb5b1bd7567059e0967fa5f8aa6faef9ab80aa12
SHA256
f074540f15e9ab2466d3a7d77ac19ffcf73e498eb8ea16f827406dc0e0465e8d
SHA512
a4f1e81b7b2ab9d6917be1c86bce39be12a10ed790230efeb40666cecb94cdfaca65cc2e71d1120fa24d4886fe71fed21b534a38e8436b73bc5bb3afcc2fb2d6
SSDEEP
768:3EUs6lKOxyKfjkAG5Xqijth6UQIP9vqhVVxr+qtVqSkR1Fz4Z/jfOpuwSYzpcSG:3PEOxyjP3jthL9CrnJ2MZ/ySDSG
Checks for missing Authenticode signature.
resource |
---|
4fd969a2e3d4a8687ee416b84f30f53b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
Terlockend
ServiceDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE