DllUpdate
Install
MainInstall
ServiceMain
Uninstall
Behavioral task
behavioral1
Sample
ecb064578eb22ee9bab3e7b3001bf9a3c3696187a9e37b63f75371212da2088f.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ecb064578eb22ee9bab3e7b3001bf9a3c3696187a9e37b63f75371212da2088f.dll
Resource
win10v2004-20240226-en
Target
ecb064578eb22ee9bab3e7b3001bf9a3c3696187a9e37b63f75371212da2088f
Size
52KB
MD5
afead789a6c16f70cae7fcca19d866f9
SHA1
6fa893461c711fdd2ba2f232de9cf1d554d2bf5c
SHA256
ecb064578eb22ee9bab3e7b3001bf9a3c3696187a9e37b63f75371212da2088f
SHA512
1d94811bcd75d7de04f853c9654bc0a072fe13a10cda52b23f35a4b6dbe6fa0ffe2bf310545478c3546a96642b0680471a0b5d7e42cc3bf854e2f1e9291961c9
SSDEEP
768:Xs0zKSL7e4nFOW4pOrvXmZJyDB8Me7zf+ZLPoOPGxdIW7UKiO:7OUeAlLXQyDBRfZLwpIWgKiO
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
ecb064578eb22ee9bab3e7b3001bf9a3c3696187a9e37b63f75371212da2088f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHGetSpecialFolderPathA
GetWindowTextA
wsprintfA
GetClassNameA
GetWindow
FindWindowA
GetLastInputInfo
GetSystemMetrics
GetAsyncKeyState
GetForegroundWindow
GetKeyState
RegQueryValueA
RegCloseKey
GetTokenInformation
LookupAccountSidA
OpenProcessToken
RegOpenKeyExA
VariantClear
VariantInit
CoInitialize
CoCreateInstance
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
strchr
_beginthreadex
rand
malloc
free
realloc
atol
sprintf
time
localtime
strftime
_strupr
strrchr
strncpy
strstr
_local_unwind2
_except_handler3
_CxxThrowException
??2@YAPAXI@Z
__CxxFrameHandler
_ftol
ceil
memmove
??3@YAXPAX@Z
_stricmp
wcstombs
_strcmpi
WSAIoctl
WSAStartup
htons
setsockopt
connect
gethostbyname
socket
recv
select
closesocket
send
WSACleanup
Netbios
URLDownloadToFileA
FreeConsole
GetCurrentDirectoryA
CopyFileA
WritePrivateProfileStringA
LoadLibraryW
GetModuleHandleA
VirtualProtect
GetPrivateProfileStringA
lstrcmpiA
lstrcpyA
ReadFile
CreateProcessA
GetFileAttributesA
lstrcatA
GetLocalTime
GetSystemDirectoryA
DeleteFileA
GetDriveTypeA
GetDiskFreeSpaceExA
lstrlenA
GetLastError
GetFileSize
CreateFileA
SetFilePointer
WriteFile
Sleep
CancelIo
InterlockedExchange
SetEvent
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventA
VirtualAlloc
VirtualFree
WinExec
GetProcAddress
LoadLibraryA
LocalFree
LocalSize
FreeLibrary
LocalAlloc
GlobalMemoryStatusEx
OpenProcess
Process32Next
Process32First
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetLocaleInfoW
GetModuleFileNameA
DllUpdate
Install
MainInstall
ServiceMain
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ