Install
InstallService
Remove
RemoveService
ServiceMain
SetNew
SetNewString
Static task
static1
Behavioral task
behavioral1
Sample
ExplorerEditor.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ExplorerEditor.dll
Resource
win10v2004-20240426-en
Target
ExplorerEditor.dll
Size
27KB
MD5
a42e212ee0cad5eb23da87e6fb9614ad
SHA1
846c0856f7b18c34cb786c75614c49ce10fbd612
SHA256
8e398f0b5d98a231e544b4505ac7a873976e60093a54b7c3f5cecbab5796fd1b
SHA512
0c26b65daeabbd42b7da5cf84d51fbae824b26305c943487299b6c73bbd146ab6b0c67882a94cbffe03b3fc2d7a2709b9de918c6a0100f76efca96e45e1775f7
SSDEEP
384:0KhtEWDFsvBz1DEMT+hzBMZhLxOtMUVyJnHQHEqnsvitLHT79tHjWR:1jY+W+Xk1OtbwZHQHp4iVHTBtHs
Checks for missing Authenticode signature.
resource |
---|
ExplorerEditor.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
send
gethostbyname
connect
recv
htons
inet_addr
select
listen
bind
setsockopt
socket
WSAStartup
closesocket
inet_ntoa
accept
RegisterServiceCtrlHandlerA
DuplicateTokenEx
CreateProcessAsUserA
SetServiceStatus
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
WaitForSingleObject
GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CloseHandle
GetLastError
GetCurrentProcess
CreateProcessA
GetSystemDirectoryA
GetStartupInfoA
CreatePipe
Sleep
FindClose
WriteFile
FindFirstFileA
ReadFile
VirtualAlloc
GetFileSize
CreateFileA
GetModuleFileNameA
ExitThread
FreeLibrary
GetProcAddress
LoadLibraryA
TerminateProcess
PeekNamedPipe
DisconnectNamedPipe
WaitForMultipleObjects
TerminateThread
CreateThread
URLDownloadToFileA
DeleteUrlCacheEntry
__crt_debugger_hook
wcstombs
strncmp
strncpy
malloc
free
atoi
memcpy
__C_specific_handler
memset
sprintf
strncat
_strnicmp
_stricmp
strstr
strchr
Install
InstallService
Remove
RemoveService
ServiceMain
SetNew
SetNewString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ