DoMainWork
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
65513bc1f0649d3fd4b1f5c9c429b176.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65513bc1f0649d3fd4b1f5c9c429b176.dll
Resource
win10v2004-20231222-en
Target
65513bc1f0649d3fd4b1f5c9c429b176
Size
128KB
MD5
65513bc1f0649d3fd4b1f5c9c429b176
SHA1
7da2140fdf5f6cff7bc49a5a16b87a20c3bf2fce
SHA256
aa67526a62087766a73effd563ec81948a971560ff7e1220db01e3c48428474c
SHA512
e3db24aabbecdc9546c2251dc8c7599c1c7879ec0eeea4fb777b839cb3b7a1baebd1d8da341c111c0ded70ea85aeec8e04c608c223ed8a9a4d82275daab90c01
SSDEEP
1536:sz8UOkTTim/StMIte+U2htajPpgycx8z+XT8ukro1V+CsHl75a1Ez3/p+MXYATTO:KOk3pefI+ZYjxgN+JoaCsba1sEke0
Checks for missing Authenticode signature.
resource |
---|
65513bc1f0649d3fd4b1f5c9c429b176 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitWindowsEx
DeleteObject
RegCloseKey
ShellExecuteA
CreateStreamOnHGlobal
listen
StrCmpW
GetModuleFileNameExA
ImmReleaseContext
capCreateCaptureWindowA
waveInUnprepareHeader
malloc
lstrcatW
GetModuleHandleA
GetProcAddress
VirtualProtect
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ