BuildTreeItem
ServiceMain
SurrendHome
Static task
static1
Behavioral task
behavioral1
Sample
c24ceca7915304c5f92c6c3f942cc415.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c24ceca7915304c5f92c6c3f942cc415.dll
Resource
win10v2004-20240226-en
Target
c24ceca7915304c5f92c6c3f942cc415
Size
83KB
MD5
c24ceca7915304c5f92c6c3f942cc415
SHA1
eee56094377c4bc0895b7f5357efef0038f5201c
SHA256
7d15e4982339a18a7555a6923e2fd23ddd0500a2e478caf885d3b061ff6a6dc9
SHA512
d123723441e43e62d0ae58027ad884b6e5e330e86fae4b0309363c95b861d9be1bc3b464fd8f44ddb966eb4d7a1f788dd610772538755d45ab5f2a877ed0fc82
SSDEEP
1536:Z8vtTq34tUTdizsgo86IMKlq4EjJ2d8q+VNlHl5C:ZgtTqItUT8zsggKlfAc8jfnC
Checks for missing Authenticode signature.
resource |
---|
c24ceca7915304c5f92c6c3f942cc415 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
GetLastError
CloseHandle
WriteFile
CreateFileA
FreeLibrary
Sleep
GetProcAddress
LoadLibraryA
SetFileAttributesA
GetTickCount
GetTempPathA
CreateDirectoryA
WaitForSingleObject
CreateEventA
SetEvent
GetDriveTypeA
CreateMutexA
FormatMessageA
OpenMutexA
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
lstrcpyA
CopyFileA
GetFileAttributesA
FreeConsole
RaiseException
InterlockedExchange
LocalAlloc
SetWindowsHookExA
CallNextHookEx
wsprintfA
SHGetSpecialFolderPathA
strncpy
wcstombs
realloc
malloc
fwrite
fread
fclose
fopen
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
strrchr
sscanf
fgets
_beginthreadex
BuildTreeItem
ServiceMain
SurrendHome
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ