Maintenance
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
57895bfaaf6bd830dae67803d70c3139.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57895bfaaf6bd830dae67803d70c3139.dll
Resource
win10v2004-20231215-en
Target
57895bfaaf6bd830dae67803d70c3139
Size
84KB
MD5
57895bfaaf6bd830dae67803d70c3139
SHA1
136e720b5772480ec543b73b32d3bb6cd075131b
SHA256
8d3463244d99a1dbb68b71396e1cd3c5e69ebfc5a535b9be929dbc74bea74d49
SHA512
f85bfb49e99729c34fbf1f2a99bdc0b07c15b3e01f7c1f207e7091c3481172ada58b89d37e3a0e517489290dd6ad7ff5634a94358751ab6b2fcfec49cb0f1505
SSDEEP
1536:gsQGQTCkFkZtThbXSljx+KdKyyV1j78L0aqalq0dxoxm:gsQGQmkFUT9XEcb78L0aj8ioxm
Checks for missing Authenticode signature.
resource |
---|
57895bfaaf6bd830dae67803d70c3139 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
AdjustTokenPrivileges
StartServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
wvsprintfA
ShowWindow
SendMessageA
PostThreadMessageA
MessageBoxA
LoadStringA
GetWindowThreadProcessId
GetSystemMetrics
GetDlgItem
FindWindowExA
FindWindowA
CharNextA
CharLowerBuffA
CharUpperBuffA
CharToOemA
GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrlenW
WriteProcessMemory
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualAllocEx
Sleep
SetFileAttributesA
SetErrorMode
ReadFile
OpenProcess
OpenMutexA
LoadLibraryA
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetThreadLocale
GetTempPathA
GetSystemDirectoryA
GetStdHandle
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentProcess
GetComputerNameA
GetCPInfo
FreeLibrary
FreeConsole
FormatMessageA
EnumCalendarInfoA
DeleteFileA
CreateThread
CreateRemoteThread
CreateMutexA
CreateFileA
CreateDirectoryA
CompareStringA
CloseHandle
Netbios
WSACleanup
WSAStartup
gethostname
gethostbyname
Maintenance
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ