ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
c8e7545add6b2c92d411d031cc8581a8c7647ae1b7748a43e45dbc61f5791a06.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8e7545add6b2c92d411d031cc8581a8c7647ae1b7748a43e45dbc61f5791a06.dll
Resource
win10v2004-20240226-en
Target
c8e7545add6b2c92d411d031cc8581a8c7647ae1b7748a43e45dbc61f5791a06
Size
162KB
MD5
c4ae971b1117ef0099159c4e0f01db73
SHA1
c20f494559c36d1eca021844945f9591a3bfd67b
SHA256
c8e7545add6b2c92d411d031cc8581a8c7647ae1b7748a43e45dbc61f5791a06
SHA512
5f13e5326fd97e6b9b2bf9e968b469fb75945f828fe5d6e823f36fff22207761d6fb0e0e8b76135cf355ea12d137d19fd6dc015c6b1d2b329d2c380f715754cb
SSDEEP
3072:c7rwiRXUJuAFkIIbJXdnWk3Sha3jWOvlpQGnX:+rFRXUUDdPSzMlPnX
Checks for missing Authenticode signature.
resource |
---|
c8e7545add6b2c92d411d031cc8581a8c7647ae1b7748a43e45dbc61f5791a06 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
DeleteFileA
ExitProcess
HeapAlloc
GetCurrentProcess
HeapFree
Process32First
GetProcessHeap
ExpandEnvironmentStringsA
OpenProcess
WideCharToMultiByte
FreeConsole
CreateEventA
GetLocalTime
Process32Next
GetVersionExA
CreateToolhelp32Snapshot
CreateFileW
CreateFileA
WriteConsoleW
SetStdHandle
LoadLibraryW
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
LoadLibraryA
GetSystemInfo
GetProcAddress
GetLastError
GetTickCount
GetSystemDefaultLCID
WaitForSingleObject
FreeLibrary
GetModuleFileNameA
GetFileSize
GetLocaleInfoW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetModuleHandleW
WriteFile
GetModuleFileNameW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
FreeEnvironmentStringsW
SetEndOfFile
DefWindowProcA
GetMessageA
PostQuitMessage
LoadIconA
TranslateMessage
GetSystemMetrics
CreateWindowExA
ShowWindow
DispatchMessageA
UpdateWindow
LoadCursorA
RegisterClassA
GetStockObject
SetServiceStatus
LookupPrivilegeValueA
EqualSid
GetTokenInformation
ConvertSidToStringSidA
RegQueryValueExA
RegisterServiceCtrlHandlerW
CoCreateGuid
SHRegGetValueA
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ