InsertSvc
ServiceMain
UninstallSvc
ָ�뵽������
Static task
static1
Behavioral task
behavioral1
Sample
df81d2c3c472552a1d731dd4af5ed6d818e088125301291903ff06b98dee209c.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
df81d2c3c472552a1d731dd4af5ed6d818e088125301291903ff06b98dee209c.dll
Resource
win10v2004-20240802-en
Target
df81d2c3c472552a1d731dd4af5ed6d818e088125301291903ff06b98dee209c
Size
8.9MB
MD5
3b8dc1cf863b1d243b0d9340cbee7a06
SHA1
772fbb482a89252d779a6724875259a188298c41
SHA256
df81d2c3c472552a1d731dd4af5ed6d818e088125301291903ff06b98dee209c
SHA512
4303f2e73f16ca9c420a5524b825fd380d541fc1f8798903dada79c62b83c1690832a2d6bed319581c6be8279f4bec33b34fc0f076aff8e795aef90654f22b68
SSDEEP
196608:4fqs234wIFu9jJKC4Pc5CTSW4YExZWPZm6r04RdP5:a234e9B8cBlYExZWxl
Checks for missing Authenticode signature.
resource |
---|
df81d2c3c472552a1d731dd4af5ed6d818e088125301291903ff06b98dee209c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
waveOutUnprepareHeader
inet_ntoa
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetSysColorBrush
CharUpperBuffW
ExtSelectClipRgn
OpenPrinterA
RegQueryValueA
Shell_NotifyIconA
OleInitialize
SafeArrayUnaccessData
ImageList_Destroy
GetOpenFileNameA
InsertSvc
ServiceMain
UninstallSvc
ָ�뵽������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ