Service
Start
Static task
static1
Behavioral task
behavioral1
Sample
5d0231e3f0378a6e1a791e5029305ae6e67bb513246751e4b5edc2f5ae780175.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d0231e3f0378a6e1a791e5029305ae6e67bb513246751e4b5edc2f5ae780175.dll
Resource
win10v2004-20240226-en
Target
5d0231e3f0378a6e1a791e5029305ae6e67bb513246751e4b5edc2f5ae780175
Size
173KB
MD5
ca313d8e460bd1468c751e0e41c4b914
SHA1
53a16362e42f943b25276cfa5a7ac9b67e95ff97
SHA256
5d0231e3f0378a6e1a791e5029305ae6e67bb513246751e4b5edc2f5ae780175
SHA512
a76a07344845c12b5c5faadfd0a1ea3722635060fe6449d977f00ea2a0deef7d1a61655d61902cefc9dc114e3cfaae617935359e2ccdf36645f5d6709022d63e
SSDEEP
3072:GUxP4jFdHO3BWpMEJio41W4oX4R+a8AHrm7n:GUK0BWBV41hoX2z
Checks for missing Authenticode signature.
resource |
---|
5d0231e3f0378a6e1a791e5029305ae6e67bb513246751e4b5edc2f5ae780175 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateToolhelp32Snapshot
Process32First
Process32Next
FreeLibrary
GetProcAddress
CloseHandle
IsBadReadPtr
GetLocalTime
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetProfileStringA
LoadLibraryA
Sleep
SetEnvironmentVariableA
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
HeapReAlloc
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
ReadFile
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
WideCharToMultiByte
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetTimeZoneInformation
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetConsoleMode
ReadConsoleW
SetFilePointer
SetFilePointerEx
GetConsoleCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetFileAttributesExW
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
CompareStringW
LCMapStringW
OutputDebugStringW
LoadLibraryW
SetEndOfFile
RegisterServiceCtrlHandlerA
SetServiceStatus
gethostbyname
shutdown
select
inet_addr
htons
WSAStartup
closesocket
Service
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ