ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
0b03a9661b0b48d6243d128684e952d7e5f510a3e4797b8e9b1f173e0b349178.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b03a9661b0b48d6243d128684e952d7e5f510a3e4797b8e9b1f173e0b349178.dll
Resource
win10v2004-20240226-en
Target
0b03a9661b0b48d6243d128684e952d7e5f510a3e4797b8e9b1f173e0b349178
Size
156KB
MD5
56ce9d524ca8d1bc2b3ed83948fde4b8
SHA1
e74597927539f0e22ed23bc2c0258bd4ce27b9bf
SHA256
0b03a9661b0b48d6243d128684e952d7e5f510a3e4797b8e9b1f173e0b349178
SHA512
ae8b491b3c2dc2f4fa9caae13098118f7e272f1c4de9140ee30135552e8eb289ec64a6773c29ac58f09439cdb5da976134cfae6e6ea47ef6e4b171b54fb2eec0
SSDEEP
3072:92VzmpBOlRjzlWXcdvK8103VtZOsLutTBfix56RN:am3OlJdb03vZOltTBa6N
Checks for missing Authenticode signature.
resource |
---|
0b03a9661b0b48d6243d128684e952d7e5f510a3e4797b8e9b1f173e0b349178 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
GetSystemDefaultLangID
GetVersionExA
GetCurrentProcessId
FreeLibrary
GetHandleInformation
GetSystemDirectoryA
TerminateProcess
ReadFile
PeekNamedPipe
SetFilePointer
GlobalAlloc
GetFileSize
DeleteFileA
GlobalFree
DisconnectNamedPipe
CreateProcessA
CreatePipe
WaitForMultipleObjects
SetFileTime
GetFileTime
WriteFile
LoadLibraryA
OpenProcess
GetProcessHeap
SetEndOfFile
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
GetProcAddress
InitializeCriticalSection
QueryPerformanceCounter
GetTickCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
FreeConsole
GetLocalTime
OutputDebugStringA
CreateFileA
GetCurrentProcess
DuplicateHandle
CloseHandle
GetModuleFileNameA
ExitProcess
Sleep
WriteConsoleA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
RtlUnwind
ExitThread
GetLastError
CreateThread
WideCharToMultiByte
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
HeapFree
GetConsoleCP
GetConsoleMode
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
HeapAlloc
SetHandleCount
GetFileType
DefWindowProcA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
ReleaseDC
GetDC
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenInputDesktop
SetThreadDesktop
GetSystemMetrics
CloseWindowStation
CloseDesktop
CreateCompatibleDC
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateCompatibleBitmap
GetDIBits
DeleteObject
GetStockObject
CreateDCA
RegCreateKeyExA
GetUserNameA
RegSetValueExA
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SetServiceStatus
inet_ntoa
gethostbyname
gethostname
closesocket
recv
connect
htons
inet_addr
socket
send
shutdown
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ