Install
RunInstall
RundllUninstall
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
dfbf42967d945c4f4d0f906bfad305eb.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dfbf42967d945c4f4d0f906bfad305eb.dll
Resource
win10v2004-20240226-en
Target
dfbf42967d945c4f4d0f906bfad305eb
Size
77KB
MD5
dfbf42967d945c4f4d0f906bfad305eb
SHA1
ec1cbcf3d57a714351c0f4b7c15a1a627e068001
SHA256
f2d23346ca81ab5f2cba0124d767986e07a9426749b8a39baf8e694f6b86c112
SHA512
853b6b308125d9e0fa197e56cff18cf0a75a4d007667c7814c4f032d13aeeafb60351e73f7ddf7f9f5bbc2b571f1bf122b1e0c6ffc65cf5945f8bb8e95a5e969
SSDEEP
1536:Ql4Ol0PGc4R8Pv4Dw1yUpbQFnToIfxgY0r5ZmNiTJb/:Forc4RA8w1yUpbQtTBfxgY0r5ZmNiTJz
Checks for missing Authenticode signature.
resource |
---|
dfbf42967d945c4f4d0f906bfad305eb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
GetSystemDirectoryA
CloseHandle
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
lstrlenA
lstrcpyA
WaitForSingleObject
MoveFileExA
SetThreadPriority
ExitProcess
FreeConsole
GlobalMemoryStatus
InterlockedExchange
HeapAlloc
GetCurrentThreadId
GetLastError
RaiseException
LocalAlloc
__CxxFrameHandler
_CxxThrowException
_except_handler3
atoi
strcspn
strstr
??3@YAXPAX@Z
wcstombs
rand
srand
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
_adjust_fdiv
??2@YAPAXI@Z
strncpy
sprintf
strncat
_strlwr
Install
RunInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ