ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
99d030a5f63ccba6c2f6f1f0ddd50586b13da7f5f350649d018035b53d4a8d54.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
99d030a5f63ccba6c2f6f1f0ddd50586b13da7f5f350649d018035b53d4a8d54.dll
Resource
win10v2004-20240226-en
Target
99d030a5f63ccba6c2f6f1f0ddd50586b13da7f5f350649d018035b53d4a8d54
Size
36KB
MD5
070087ae64d73b746234c8840caf2ea5
SHA1
87354ce3a6aa814b5a7b7a120ab323a1c78f9e39
SHA256
99d030a5f63ccba6c2f6f1f0ddd50586b13da7f5f350649d018035b53d4a8d54
SHA512
922c9a62f5ab83baf0f2b77e16e483c69459007be44dee18576220c860e4acee082b851169539ecfa0baf8a3d2e5a00cc82931247cc780be09a861bcfb7e7ca5
SSDEEP
768:ExcsV4SrDmhBYr0/6ybzAW0SvfSWtVME8GdZRpB:LmwoeUbWtVjtZRpB
Checks for missing Authenticode signature.
resource |
---|
99d030a5f63ccba6c2f6f1f0ddd50586b13da7f5f350649d018035b53d4a8d54 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterServiceCtrlHandlerA
SetServiceStatus
CloseEventLog
ReadEventLogA
GetOldestEventLogRecord
OpenEventLogA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcA
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
GetStockObject
??3@YAXPAX@Z
localtime
__CxxFrameHandler
fclose
fprintf
fopen
sprintf
_access
fwrite
rand
srand
time
fread
ftell
fseek
fgets
_iob
_purecall
_CxxThrowException
free
malloc
strncmp
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
atoi
_beginthreadex
??2@YAPAXI@Z
strstr
strncpy
wcstombs
_vsnprintf
strrchr
_strlwr
shutdown
closesocket
connect
gethostbyname
htons
inet_addr
socket
WSAGetLastError
send
recv
WSAStartup
select
GetAdaptersInfo
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
LeaveCriticalSection
GetLastError
SetFilePointer
EnterCriticalSection
GetProcAddress
GlobalAlloc
FreeConsole
Sleep
LoadLibraryA
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ