ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
39cd52a897cc2800ff9d8a2eb56ed0b72327ae49141198616a71424e54850454.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39cd52a897cc2800ff9d8a2eb56ed0b72327ae49141198616a71424e54850454.dll
Resource
win10v2004-20231215-en
Target
39cd52a897cc2800ff9d8a2eb56ed0b72327ae49141198616a71424e54850454
Size
48KB
MD5
806b858ac3a1b4049b07377bffe183f0
SHA1
52d12f53b1b17c0a1a214765cbd2fea6befda3a4
SHA256
39cd52a897cc2800ff9d8a2eb56ed0b72327ae49141198616a71424e54850454
SHA512
a275ad6d4180d3fb219c6ced94d3b04f8cd292eb7f6eb370a74480c3540591d3d7a1f1ed4d78be9c58f299104e400415d3baa9e5eee73d3947808534e7f6e01f
SSDEEP
768:vSfnclvNu7NarGp4Oclg8dIgyFWfSWcTVME8Gdaq:pwRGGU1WDXWcTVjtaq
Checks for missing Authenticode signature.
resource |
---|
39cd52a897cc2800ff9d8a2eb56ed0b72327ae49141198616a71424e54850454 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterServiceCtrlHandlerA
SetServiceStatus
CloseEventLog
ReadEventLogA
GetOldestEventLogRecord
OpenEventLogA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcA
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
GetStockObject
??3@YAXPAX@Z
localtime
__CxxFrameHandler
fclose
fprintf
fopen
sprintf
_access
fwrite
rand
srand
time
fread
ftell
fseek
fgets
_iob
_purecall
_CxxThrowException
free
malloc
strncmp
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
atoi
_beginthreadex
??2@YAPAXI@Z
strstr
strncpy
wcstombs
_vsnprintf
strrchr
_strlwr
shutdown
closesocket
connect
gethostbyname
htons
inet_addr
socket
WSAGetLastError
send
recv
WSAStartup
select
GetAdaptersInfo
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
LeaveCriticalSection
GetLastError
SetFilePointer
EnterCriticalSection
GetProcAddress
GlobalAlloc
FreeConsole
Sleep
LoadLibraryA
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ