ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
4f928b31517540aea534c154b60d1cdc19e3f2d6440647f500497e7349813d1a.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
4f928b31517540aea534c154b60d1cdc19e3f2d6440647f500497e7349813d1a.dll
Resource
win10v2004-20240226-en
Target
4f928b31517540aea534c154b60d1cdc19e3f2d6440647f500497e7349813d1a
Size
103KB
MD5
0762889cca9ab780596ed5985ebcd83e
SHA1
d4f2f77682e72a2a56d52b1991ce6e08d1cf860a
SHA256
4f928b31517540aea534c154b60d1cdc19e3f2d6440647f500497e7349813d1a
SHA512
24687b7ab61be74d0f286ce492fc8fa7c7e5fc3258fe09bb3c8f15a8979929b49c8bc88d478d30b3373550ad16bc42b5f50981ffeaacd6af86139670e21a8a84
SSDEEP
3072:07inidhIOG8PpMsqo7cSxtTBfC4cSiKa:nhpoBtTBg
Checks for missing Authenticode signature.
resource |
---|
4f928b31517540aea534c154b60d1cdc19e3f2d6440647f500497e7349813d1a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
GetSystemDefaultLangID
GetVersionExA
GetCurrentProcessId
GetSystemDirectoryA
TerminateProcess
GetHandleInformation
SetFileTime
GetFileTime
GetFileSize
CreateProcessA
LeaveCriticalSection
WriteFile
DisconnectNamedPipe
CreatePipe
WaitForMultipleObjects
ReadFile
PeekNamedPipe
FreeLibrary
SetFilePointer
GlobalFree
FlushFileBuffers
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
DeleteCriticalSection
LoadLibraryA
GetProcAddress
InitializeCriticalSection
GetLocalTime
OpenProcess
CreateFileA
GetCurrentProcess
DuplicateHandle
CloseHandle
DeleteFileA
ExitProcess
GetModuleFileNameA
Sleep
WaitForSingleObject
FreeConsole
GlobalAlloc
GetProcessWindowStation
GetThreadDesktop
GetDC
UpdateWindow
OpenWindowStationA
SetProcessWindowStation
OpenInputDesktop
SetThreadDesktop
GetSystemMetrics
CloseWindowStation
CloseDesktop
PostQuitMessage
DefWindowProcA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
ReleaseDC
ShowWindow
CreateWindowExA
RegisterClassA
LoadCursorA
CreateCompatibleBitmap
GetDIBits
CreateDCA
CreateCompatibleDC
DeleteDC
CreateDIBSection
BitBlt
DeleteObject
SelectObject
GetStockObject
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
GetUserNameA
inet_ntoa
gethostbyname
gethostname
closesocket
shutdown
send
connect
htons
inet_addr
socket
recv
WSAStartup
select
setsockopt
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
SHGetValueA
_adjust_fdiv
malloc
_initterm
free
strncmp
_vsnprintf
_iob
printf
strchr
sscanf
memcmp
strlen
memcpy
strcpy
rand
strcat
sprintf
_purecall
memset
??2@YAPAXI@Z
__CxxFrameHandler
fopen
fwrite
fclose
strstr
strncpy
wcstombs
_beginthreadex
srand
_strlwr
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ