DllUpdate
Install
MainThread
ServiceMain
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
b712ccb8f6bc08da5c03da8bc0b72562c6dac33b1c3b4ae0b4fb5bb1705ad590.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b712ccb8f6bc08da5c03da8bc0b72562c6dac33b1c3b4ae0b4fb5bb1705ad590.dll
Resource
win10v2004-20240508-en
Target
b712ccb8f6bc08da5c03da8bc0b72562c6dac33b1c3b4ae0b4fb5bb1705ad590
Size
72KB
MD5
ad4440a77bbbf82bfa7b5dbf5481b98b
SHA1
1558676ed64e363378638bc11b7a4b0e6dbbf021
SHA256
b712ccb8f6bc08da5c03da8bc0b72562c6dac33b1c3b4ae0b4fb5bb1705ad590
SHA512
2e9dd1797b78aae20b11e31c630299acfdf5235f44b2537cc1bfb288f228b775a9e0ab111a69379a283781e91e959024fe74eacac6a3400f091abd13b9951887
SSDEEP
768:HrF8SwwBIPMt1ZAhgFv3w+slY7dw2oRa8EBwem+Ir87ZdHJ3TNmByRHm:Ztww+EiBq7ZoRa8EBwemJmrHpTNu0
Checks for missing Authenticode signature.
resource |
---|
b712ccb8f6bc08da5c03da8bc0b72562c6dac33b1c3b4ae0b4fb5bb1705ad590 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
lstrlenA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
GetTickCount
WinExec
ReadFile
GetFileAttributesA
LocalFree
LocalSize
LocalAlloc
lstrcatA
GetCurrentProcessId
Process32Next
TerminateProcess
OpenProcess
Process32First
CopyFileA
GetFileSize
GlobalMemoryStatusEx
WaitForSingleObject
GetCurrentDirectoryA
FreeConsole
HeapAlloc
GetProcessHeap
VirtualProtect
HeapFree
InitializeCriticalSection
DeleteCriticalSection
CreateThread
LeaveCriticalSection
EnterCriticalSection
SetEvent
CreateEventA
WritePrivateProfileStringA
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcmpiA
CreateFileA
SetFilePointer
WriteFile
CloseHandle
Sleep
InterlockedExchange
VirtualAlloc
GetModuleFileNameA
VirtualFree
wsprintfA
ChangeDisplaySettingsA
GetWindowThreadProcessId
GetLastInputInfo
GetSystemMetrics
RegOpenKeyExA
RegCloseKey
CloseServiceHandle
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA
SHGetSpecialFolderPathA
VariantInit
VariantClear
ord825
ord823
_strupr
_strcmpi
_stricmp
__dllonexit
_strnicmp
??1type_info@@UAE@XZ
strchr
_adjust_fdiv
_onexit
_initterm
ceil
_ftol
strlen
__CxxFrameHandler
memcpy
memcmp
_CxxThrowException
memset
_except_handler3
_local_unwind2
rand
strstr
strcpy
strncpy
strrchr
strcmp
free
malloc
printf
atoi
strcspn
wcstombs
realloc
strcat
_errno
_beginthreadex
getsockname
listen
bind
htons
socket
accept
ntohs
closesocket
gethostbyname
sendto
recvfrom
__WSAFDIsSet
select
send
recv
getpeername
inet_ntoa
WSACleanup
WSAStartup
connect
inet_addr
GetIfTable
GetAdaptersInfo
DllUpdate
Install
MainThread
ServiceMain
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ