ServiceMain
SmartDeviceChecking
Static task
static1
Behavioral task
behavioral1
Sample
6588536f62a630a4bd94b35e3d7d1d43.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6588536f62a630a4bd94b35e3d7d1d43.dll
Resource
win10v2004-20231215-en
Target
6588536f62a630a4bd94b35e3d7d1d43
Size
2.0MB
MD5
6588536f62a630a4bd94b35e3d7d1d43
SHA1
a02c9312d3f8f21fc3b27d29f3396a8b5ea75256
SHA256
c480ee2d38dd47dcb6e2de05f0f098f3a8b3da87a7bdecdee5b4383a67f321fa
SHA512
1c4f1386f0581dc050e747cb92496edef9b808c7299128534255a3db3a74365f403c0f9ff6ecd106ddf7b3f4565a8e31e0e4d29aa767b6c048588164cdbfe057
SSDEEP
49152:V5ArZwJOEmThfFw81mcecPh22aRfrlHv8Up2:V5IVhd287pNaRfr9kUp2
Checks for missing Authenticode signature.
resource |
---|
6588536f62a630a4bd94b35e3d7d1d43 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
CloseHandle
Sleep
GetLastError
ExitProcess
GlobalFree
GlobalAlloc
FreeLibrary
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
GetProcAddress
LoadLibraryW
HeapFree
GetProcessHeap
HeapAlloc
WaitForSingleObject
LeaveCriticalSection
ReleaseSemaphore
WriteFile
DeleteCriticalSection
GetCurrentProcess
WriteProcessMemory
VirtualProtectEx
ReadProcessMemory
GetModuleHandleW
SetEvent
GetTickCount
ResetEvent
CreateThread
SetFilePointer
GetSystemTimeAsFileTime
CreateDirectoryA
EnterCriticalSection
MapVirtualKeyExW
IsCharAlphaA
BeginPaint
GetActiveWindow
SetLayeredWindowAttributes
GetLayeredWindowAttributes
RemovePropA
EnumDisplayDevicesW
CreateWindowExA
DestroyWindow
DrawIconEx
BringWindowToTop
ToAscii
SetWindowTextA
GetWindowTextA
CharUpperW
CloseDesktop
CreateDesktopA
ChangeDisplaySettingsW
DefWindowProcW
GetDC
SetWindowLongW
ReleaseDC
PostMessageW
SetCursorPos
GetCursorPos
EnumDisplaySettingsW
ShowWindow
GetWindowLongW
GetRawInputDeviceInfoA
LoadStringW
SetWindowsHookExW
UnhookWindowsHookEx
ServiceMain
SmartDeviceChecking
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ