Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
9c3f9507e0bfaab31eaa93562aeb1fa8.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9c3f9507e0bfaab31eaa93562aeb1fa8.dll
Resource
win10v2004-20231215-en
Target
9c3f9507e0bfaab31eaa93562aeb1fa8
Size
41KB
MD5
9c3f9507e0bfaab31eaa93562aeb1fa8
SHA1
3eb148765d4b0b988d400e9086da367b6ad29cbd
SHA256
ca8371ff9101a99add5c195f8142a0a73948975090ec20c59045eff616797c3e
SHA512
0b64c3adc059e5fe1d00103ca8619288acb8cc7125d36cad6d7547ecd05107d8239834831bea5fa817bbecc48baac5e33246cd007d23f046988b6ea5b32c5f83
SSDEEP
768:79ASu+fPFFR+twkG2Ht7ZaWmldBbOMHnuqEXBcV5t6eDYYnXMNC6:6B+fPrQwp6tXUdBqMHnGuXt6exXMNC6
Checks for missing Authenticode signature.
resource |
---|
9c3f9507e0bfaab31eaa93562aeb1fa8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleFileNameExA
RegCloseKey
listen
ImmGetContext
StrChrA
capCreateCaptureWindowA
BitBlt
IsWindow
waveInStop
free
CreateStreamOnHGlobal
ShellExecuteA
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE