tgyhuji488
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
bf5692dfa54a8ae2d2610a53af001f0b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf5692dfa54a8ae2d2610a53af001f0b.dll
Resource
win10v2004-20240226-en
Target
bf5692dfa54a8ae2d2610a53af001f0b
Size
42KB
MD5
bf5692dfa54a8ae2d2610a53af001f0b
SHA1
08d35ef098fd3d3a0959632aaece6bdb4b07b477
SHA256
e16d4077f5edeae0c770fba3097299d6cc244e5e4db01055dbe52c7c2e6305ca
SHA512
e824f1f5519cc0b3bf76996618bc0a5a5a4205d035a7e5848adcd8ad5ac7c6b53a3f84950d32e7d3f8462ef37107b6848f7859a286f84b48180e3989d4d0867d
SSDEEP
768:URwTU/y7MTwqsiZfg3YYaXHpkaxni5NF9OxwkwNIC+ib4t:URwTytfgoYAi55tOekFb
Checks for missing Authenticode signature.
resource |
---|
bf5692dfa54a8ae2d2610a53af001f0b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
capCreateCaptureWindowA
listen
ExitWindowsEx
StrCmpW
waveInUnprepareHeader
CreateStreamOnHGlobal
RegQueryValueExA
GetModuleFileNameExA
ImmReleaseContext
strrchr
ShellExecuteA
CreateCompatibleBitmap
tgyhuji488
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE