DoMainService
MainService
MainWork
ServiceMain
Behavioral task
behavioral1
Sample
56b2c993b61d90aa7ffd71fc29cfb03f.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56b2c993b61d90aa7ffd71fc29cfb03f.dll
Resource
win10v2004-20231215-en
Target
56b2c993b61d90aa7ffd71fc29cfb03f
Size
290KB
MD5
56b2c993b61d90aa7ffd71fc29cfb03f
SHA1
2fff313651583cd8e04c19726dc7ccfdbdb486dd
SHA256
bdc7e0979968bba1772d4c43b9f2e705c4eb3b5c830f6d0cd98da3cc8b586f20
SHA512
a3e455b27c48e746dc721a0150738e075b5d139088bb81bc22a06cdb93202a5b606df18bc37d51bbf087eb5088881fe70693ae2684d65da612b1c4c4da3d961e
SSDEEP
6144:O30rlap4BC0smuMedbAoqKuXHgNDKAvrh051VxfRY+C:OErQF0b4jq9gN+U6jVc+C
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
56b2c993b61d90aa7ffd71fc29cfb03f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetTickCount
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
MessageBoxA
MessageBoxA
RegQueryInfoKeyA
SysReAllocStringLen
GetStockObject
ioctlsocket
waveInPrepareHeader
acmStreamOpen
InternetOpenUrlA
URLDownloadToFileA
capGetDriverDescriptionA
ICOpen
ImmReleaseContext
NtQueryInformationProcess
DoMainService
MainService
MainWork
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ