MyBegin
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
d27d40c84484d949e67d2e964f3b3cf0d47140ea004f85f65d75190d20ea5e82.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d27d40c84484d949e67d2e964f3b3cf0d47140ea004f85f65d75190d20ea5e82.dll
Resource
win10v2004-20240226-en
Target
d27d40c84484d949e67d2e964f3b3cf0d47140ea004f85f65d75190d20ea5e82
Size
182KB
MD5
ca567b1bee535b9ac6ad9042336c94df
SHA1
30658a7ede072ffc22f58bee3bcbe278ddfc8015
SHA256
d27d40c84484d949e67d2e964f3b3cf0d47140ea004f85f65d75190d20ea5e82
SHA512
1741c62116e4d4df36d16942a629fb63b31d6274c4915d0d711629e2419ce856b25716f11ee356d2eb4ce0f8de89df056ef16e3be955ec60d837a5dabc657c1d
SSDEEP
3072:Q8R8P/r8ooyVYwEyAg0FuG6AAg0FuF59rbvcz:NR8PDJVY4AOyAOFTkz
Checks for missing Authenticode signature.
resource |
---|
d27d40c84484d949e67d2e964f3b3cf0d47140ea004f85f65d75190d20ea5e82 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeConsole
GetProcAddress
LoadLibraryA
HeapAlloc
GetSystemTimeAsFileTime
GetLastError
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
RtlUnwind
GetCommandLineA
SetLastError
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
RaiseException
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
Sleep
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
LoadLibraryW
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
MyBegin
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ