CheckRebootForNMSFiles
DeleteNMSService
Exec
ExecAndWait
IsNMSServicePresent
IsWindows2000
RegisterWithNMS
StartNMSService
StopNMSService
UninstInitialize
UninstUnInitialize
Static task
static1
Behavioral task
behavioral1
Sample
d0f763c37b4d94ee170aff806ecd9f7f90000561e7ffb1d417f45efcf8ff596a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0f763c37b4d94ee170aff806ecd9f7f90000561e7ffb1d417f45efcf8ff596a.dll
Resource
win10v2004-20231215-en
Target
d0f763c37b4d94ee170aff806ecd9f7f90000561e7ffb1d417f45efcf8ff596a
Size
40KB
MD5
c4946840a75d0fa1c0f4aa0e373a174d
SHA1
6a77d06624ba819e36f9add2c72a65b032e47306
SHA256
d0f763c37b4d94ee170aff806ecd9f7f90000561e7ffb1d417f45efcf8ff596a
SHA512
9e5aea57db1bafc0feb3b3e3492537a9a27fda453305311672e52bea01ee025666c4ce55d45bcdec601b70cb0e999f5d46be2ceda25e5a778afef941805b963a
SSDEEP
768:RqnyylI6uIE/ljHh8lT9g+5IseH6/3+MtrP70WhoiW:RqyyY5BST955IswMjDNo/
Checks for missing Authenticode signature.
resource |
---|
d0f763c37b4d94ee170aff806ecd9f7f90000561e7ffb1d417f45efcf8ff596a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MapViewOfFile
CreateFileMappingA
CloseHandle
lstrcatA
GetWindowsDirectoryA
SetFilePointer
GetVersionExA
WaitForSingleObject
CreateProcessA
lstrcmpA
GetVersion
DeleteFileA
GetSystemDirectoryA
lstrlenA
lstrcpyA
GetFileSize
CreateFileA
ExitProcess
GetLastError
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
ControlService
RegCloseKey
QueryServiceStatus
OpenSCManagerA
StartServiceA
CloseServiceHandle
DeleteService
OpenServiceA
CheckRebootForNMSFiles
DeleteNMSService
Exec
ExecAndWait
IsNMSServicePresent
IsWindows2000
RegisterWithNMS
StartNMSService
StopNMSService
UninstInitialize
UninstUnInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ