DefendOnLogoff
GetInterface
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
003c8e84b440902aa963d4b1dc1ce7167c1ac28e7a0427c6a7bf332921ce9640.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
003c8e84b440902aa963d4b1dc1ce7167c1ac28e7a0427c6a7bf332921ce9640.dll
Resource
win10v2004-20240226-en
Target
003c8e84b440902aa963d4b1dc1ce7167c1ac28e7a0427c6a7bf332921ce9640
Size
73KB
MD5
8e132f2e2ee01f381cab1719875517ca
SHA1
00a2c5ae47f1352b7c6a0c7ecf9529cd4e8b80f0
SHA256
003c8e84b440902aa963d4b1dc1ce7167c1ac28e7a0427c6a7bf332921ce9640
SHA512
77a9c568595cad9aeb145adf3ad2a16f831e2a2a73714c481c9091c66e8499a481e861acf3fb186505b165273b195f1f6f1ddf75994f6936d71bfe9b96caf6ea
SSDEEP
1536:ofpkRVniwiQdNgSV8kXo6UqzkRm3KVEZK41IEbCN9jOY:oh4i32NgSiyzkRNd41ngOY
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_MPress |
Checks for missing Authenticode signature.
resource |
---|
003c8e84b440902aa963d4b1dc1ce7167c1ac28e7a0427c6a7bf332921ce9640 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
RegCloseKey
ord165
StrChrW
DefendOnLogoff
GetInterface
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE