MyBegin
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
960b792eda29f72dde96e8f4939f66209404b8c4be188810158c93516373e4c4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
960b792eda29f72dde96e8f4939f66209404b8c4be188810158c93516373e4c4.dll
Resource
win10v2004-20240226-en
Target
960b792eda29f72dde96e8f4939f66209404b8c4be188810158c93516373e4c4
Size
182KB
MD5
42e9beb1d0723cf5fc52c6636e6cff1e
SHA1
2b308d1623417e7c7462bee96d64346a08bc2120
SHA256
960b792eda29f72dde96e8f4939f66209404b8c4be188810158c93516373e4c4
SHA512
15d80d667652edde82670131852a74169dc2cc0c8690184ae666e5b92244b1e71aac9a7b4c69e1cd47a05bd2e348ba840b7f3cd82b7841342fc3e71c9ef89106
SSDEEP
3072:G1A0YoF2syFvwFfAg0FumKAAg0FulIr24P64G:+A0YQeFvcAOCAOluy4G
Checks for missing Authenticode signature.
resource |
---|
960b792eda29f72dde96e8f4939f66209404b8c4be188810158c93516373e4c4 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeConsole
GetProcAddress
LoadLibraryA
HeapAlloc
GetSystemTimeAsFileTime
GetLastError
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
RtlUnwind
GetCommandLineA
SetLastError
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
RaiseException
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
Sleep
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
LoadLibraryW
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
MyBegin
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ