getServiceName
startService
stopService
Static task
static1
Behavioral task
behavioral1
Sample
e1bb5ca86b55e9b590bd5bac344721d2f541ee64ea56f2b01bb4e8222d0ddd9b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e1bb5ca86b55e9b590bd5bac344721d2f541ee64ea56f2b01bb4e8222d0ddd9b.dll
Resource
win10v2004-20231222-en
Target
e1bb5ca86b55e9b590bd5bac344721d2f541ee64ea56f2b01bb4e8222d0ddd9b
Size
26KB
MD5
a98d18f81be453f949b8f4e9db76d073
SHA1
7b5e489260653d6c379208cbcf73f985b8d232d3
SHA256
e1bb5ca86b55e9b590bd5bac344721d2f541ee64ea56f2b01bb4e8222d0ddd9b
SHA512
5f7ff3d9728374891b9bb10128533bf8795bf160f85f1d2d14d6b5be374be637125bad7bed093637ceaa203b0487d8a897c2d05a5f8b84869e730f27fbe4bd69
SSDEEP
384:0MGha5Ff1v4FqttveifjTA2ofkx6SBkO1fhhQuKMwH4YG4s5tRFy74cx2:TJ4FKv8U6SBkujxl/4sbRFy74cx2
Checks for missing Authenticode signature.
resource |
---|
e1bb5ca86b55e9b590bd5bac344721d2f541ee64ea56f2b01bb4e8222d0ddd9b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?setupService@Service@@QAE_NABV?$chConstStringT@D@@_N@Z
?cleanupService@Service@@QAEXXZ
??0Service@@QAE@XZ
??1Service@@UAE@XZ
call_text_method
?szNULL@@3PBDB
?onThreadMessage@chMessageHandler@@UAEHAAVmsgObject@@@Z
?registryListenDocument@@YAHABVchRegDocument@@PAVchMessageHandler@@P82@AEHAAVmsgObject@@@Z@Z
?registryListenSection@@YAHABVchRegSection@@PAVchMessageHandler@@P82@AEHAAVmsgObject@@@Z@Z
?registryListenKey@@YAHABVchRegKey@@PAVchMessageHandler@@P82@AEHAAVmsgObject@@@Z@Z
??1chRegDocument@@QAE@XZ
?etlInterlockedIncrement@@YAHAAH@Z
?etlInterlockedDecrement@@YAHAAH@Z
??0baseDymicAlloc@@QAE@XZ
?realloc@baseDymicAlloc@@QAEPAXPAXH@Z
?free@baseDymicAlloc@@QAEXPAX@Z
?borrow_node@baseDynamicNodeAlloc_block@@IAEPAXHH@Z
?return_node@baseDynamicNodeAlloc_block@@IAEXPAX@Z
??0baseDynamicNodeAlloc_block@@IAE@XZ
??1baseDynamicNodeAlloc_block@@IAE@XZ
?getNullString@@YAABV?$chConstStringT@D@@XZ
?etlGetAppRootPath@@YA?AV?$chReferenceStringT@D@@XZ
?Lock@chMutex_Local@@QAEHH@Z
?Unlock@chMutex_Local@@QAEXXZ
?etlModuleTrace@@YAXHPBD0ZZ
?FindNextElement@chXmlObject@@QBE?AVchXmlElement@@ABVphraseConstStringA@@@Z
?FindChildElement@chXmlObject@@QBE?AVchXmlElement@@ABVphraseConstStringA@@@Z
?hasData@chXmlObject@@QBE_NXZ
??4chXmlObject@@QAEAAV0@ABV0@@Z
?GetAttributeValue@chXmlAttributeObject@@QBE?AV?$chReferenceStringT@D@@ABVphraseConstStringA@@0@Z
??1chXmlElement@@QAE@XZ
?LoadFromFile@chXmlFile@@QAEHABV?$chConstStringT@D@@@Z
??0chXmlFile@@QAE@ABV?$chConstStringT@D@@@Z
??1chXmlFile@@QAE@XZ
?LeaveMessageGroup@chMessageHandler@@QAEHXZ
??0chMessageHandler@@QAE@XZ
??1chMessageHandler@@UAE@XZ
?HasMessagePending@chThreadLocal@@QAEHI@Z
?msgJoinMessageGroup@@YAHABV?$chConstStringT@D@@PAVchMessageHandler@@P82@AEHAAVmsgObject@@@Z@Z
?SaveDocuments@uCRegistryHelper@@QAEHXZ
?getInstance@uCRegistryHelper@@SAAAV1@XZ
??0chRegKey@@QAE@ABVphraseConstStringA@@00@Z
??1chRegKey@@QAE@XZ
??0chRegSection@@QAE@ABVphraseConstStringA@@0@Z
??1chRegSection@@QAE@XZ
??0chRegDocument@@QAE@ABVphraseConstStringA@@@Z
__std_terminate
__CxxFrameHandler3
memcpy
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
_except_handler4_common
strncpy
_callnewh
free
malloc
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm_e
_initterm
_initialize_onexit_table
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
getServiceName
startService
stopService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ