ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
726ff86fcfc6f6ce4f43bef683fe5639.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
726ff86fcfc6f6ce4f43bef683fe5639.dll
Resource
win10v2004-20231215-en
Target
726ff86fcfc6f6ce4f43bef683fe5639
Size
17KB
MD5
726ff86fcfc6f6ce4f43bef683fe5639
SHA1
76094730855d5c1bd4e997b627b17280e1520e29
SHA256
a03744f35b77f3f73126c069a17ab2f7f3816a9d84e70d55cbd299502d33c7cd
SHA512
1b446378b255d02d6212ac26378a97b2942444c16c09ead85d417b2549dbc15d6b4f898fcd2604b1ee1bad2ec3d5d2b09a65e8502c2001a274edd2ff20ddac2a
SSDEEP
384:UTz5kfFoe6NFBWKnriuBBQARQkqMuo0d40:UKSNFHnrFBBQARQkKnd40
Checks for missing Authenticode signature.
resource |
---|
726ff86fcfc6f6ce4f43bef683fe5639 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gethostname
closesocket
memcpy
memcmp
strlen
_strupr
strstr
RtlZeroMemory
lstrcatA
TerminateThread
Sleep
LeaveCriticalSection
InitializeCriticalSection
GetSystemDirectoryA
GetPrivateProfileIntA
GetCurrentProcessId
EnterCriticalSection
DeleteCriticalSection
lstrcmpA
lstrcpyA
lstrcmpiA
WritePrivateProfileStringA
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
VirtualProtectEx
CreateThread
lstrlenA
WaitForSingleObject
wsprintfA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
KillTimer
SetTimer
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ