Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
983a6bece1957134046185d6342e4549.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
983a6bece1957134046185d6342e4549.dll
Resource
win10v2004-20231215-en
Target
983a6bece1957134046185d6342e4549
Size
41KB
MD5
983a6bece1957134046185d6342e4549
SHA1
b1a3b293a1cd19c9ea26bf959552da6b24cc4ce4
SHA256
98cf8cd6ffe0e0ce059eb9e1dbf1f6fa7f38728878aca94b16e5b40db74aa4dd
SHA512
6b7faec13e18980f3be8c669ca585d2b3d436b61826f4959f8ba9d08491714760668689ee21ed3c8ef496ced4def72062b6a3e1e1f305ed2c17497151df401bc
SSDEEP
768:FRtI+vuGnY6AlX/99zAayjoQH+JWlcmAfQ0OieD1xogcqC:PjGGnLAlP7AP0qiCjAtOieL9cqC
Checks for missing Authenticode signature.
resource |
---|
983a6bece1957134046185d6342e4549 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
RegCloseKey
IsWindow
listen
GetModuleFileNameExA
waveInStop
BitBlt
CreateStreamOnHGlobal
ImmGetContext
capCreateCaptureWindowA
free
ShellExecuteA
StrChrA
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE