ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
5fd2f74e4695adbe98df424acfcf1ab42dadd0af70b172596233339650cd3359.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5fd2f74e4695adbe98df424acfcf1ab42dadd0af70b172596233339650cd3359.dll
Resource
win10v2004-20240226-en
Target
5fd2f74e4695adbe98df424acfcf1ab42dadd0af70b172596233339650cd3359
Size
36KB
MD5
43a0ef15f258dcec164bee54af6f600c
SHA1
d23c194208666e7c23cb2af84e0830d3810d5d61
SHA256
5fd2f74e4695adbe98df424acfcf1ab42dadd0af70b172596233339650cd3359
SHA512
60d6315f78afd18589336dc5437236811a9a33403df1ac8f485bf459e4dcd430afd8585d87aebbcb1877472e91f09a028fac0e9b35982e43799b6d9618ed2a1f
SSDEEP
768:/RuSX0sd3rz7OCReD5RKfS+IVaE86dZR1g:6o7VsP+IVZ1ZR1
Checks for missing Authenticode signature.
resource |
---|
5fd2f74e4695adbe98df424acfcf1ab42dadd0af70b172596233339650cd3359 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterServiceCtrlHandlerA
SetServiceStatus
CloseEventLog
ReadEventLogA
GetOldestEventLogRecord
OpenEventLogA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcA
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
GetStockObject
??3@YAXPAX@Z
localtime
__CxxFrameHandler
fclose
fprintf
fopen
sprintf
_access
fwrite
fgets
fread
ftell
fseek
rand
srand
time
_iob
_purecall
_CxxThrowException
free
malloc
strncmp
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
atoi
_beginthreadex
??2@YAPAXI@Z
strstr
strncpy
wcstombs
_vsnprintf
strrchr
_strlwr
shutdown
closesocket
connect
gethostbyname
htons
inet_addr
socket
WSAGetLastError
send
recv
WSAStartup
select
GetAdaptersInfo
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
LeaveCriticalSection
GetLastError
SetFilePointer
EnterCriticalSection
GetProcAddress
GlobalAlloc
FreeConsole
Sleep
LoadLibraryA
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ