Service
Start
Static task
static1
Behavioral task
behavioral1
Sample
1403b3c9e9540c0f16f0c34d7c598ea44d57132b4d98226f5854530daa9b3a6a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1403b3c9e9540c0f16f0c34d7c598ea44d57132b4d98226f5854530daa9b3a6a.dll
Resource
win10v2004-20240226-en
Target
1403b3c9e9540c0f16f0c34d7c598ea44d57132b4d98226f5854530daa9b3a6a
Size
179KB
MD5
a3ad4b2aa6cba2707935e40dd23a8512
SHA1
a85582bc1c94dd55d355e890d434bb56277cfb0e
SHA256
1403b3c9e9540c0f16f0c34d7c598ea44d57132b4d98226f5854530daa9b3a6a
SHA512
306ef54376ad3d698c9896bed04a2e6b2aebf054a3758e4edeed0fa8af85c5f951da70c332d2517e73dd52abb34a10a89b61e6760c8bb73c898833fd3d3cd390
SSDEEP
3072:yjtFz0ftQ5lJcvAr/7ABITsiluQt5mVAYKmVuBG0BYBdB+SIQlWH4qoV:ZfKR/AITsilNt82YdVujyUQ1qo
Checks for missing Authenticode signature.
resource |
---|
1403b3c9e9540c0f16f0c34d7c598ea44d57132b4d98226f5854530daa9b3a6a |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateToolhelp32Snapshot
Process32Next
Process32First
GetLastError
FreeLibrary
GetProcAddress
CloseHandle
GetModuleFileNameA
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
GetTickCount
Sleep
LoadLibraryA
GetProfileStringA
CompareStringW
GetProcessHeap
SetEndOfFile
CreateFileW
HeapReAlloc
LoadLibraryW
CreateFileA
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
GetFileAttributesA
ExitThread
GetCurrentThreadId
CreateThread
DecodePointer
EncodePointer
HeapFree
HeapAlloc
RaiseException
RtlPcToFileHeader
WideCharToMultiByte
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetTimeZoneInformation
WriteFile
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
MultiByteToWideChar
ReadFile
SetFilePointer
GetModuleHandleW
ExitProcess
GetModuleFileNameW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringW
GetStringTypeW
WriteConsoleW
SetStdHandle
FlushFileBuffers
HeapSize
SetEnvironmentVariableA
SetServiceStatus
RegisterServiceCtrlHandlerA
select
inet_addr
htons
gethostbyname
shutdown
WSAStartup
closesocket
Service
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ