ServiceMain
entry
Static task
static1
Behavioral task
behavioral1
Sample
abd83a56df1bf1854b8d337ae6cb02721e194c2138321fd3d75262f8172760d6.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
abd83a56df1bf1854b8d337ae6cb02721e194c2138321fd3d75262f8172760d6.dll
Resource
win10v2004-20241007-en
Target
abd83a56df1bf1854b8d337ae6cb02721e194c2138321fd3d75262f8172760d6
Size
39KB
MD5
7cc8b34f80629abb8bd2c368e60491d5
SHA1
2fd26834ccc5611951072b12e59215f77098d2eb
SHA256
abd83a56df1bf1854b8d337ae6cb02721e194c2138321fd3d75262f8172760d6
SHA512
2ba190576b1e7e48c521e0fe9f3bdf88d4bb0fbb5b481aeb951c9c864eb59bd035a0338354b4d050666913843c08fd1fc5f3560f20672961000b518db7758441
SSDEEP
768:5utABoy7TwOGdA6fYfT1U01HyhulyQylvtV2M:EASywOGdA1Tn1ShB5O
Checks for missing Authenticode signature.
resource |
---|
abd83a56df1bf1854b8d337ae6cb02721e194c2138321fd3d75262f8172760d6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
CloseHandle
Sleep
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
RaiseException
GetLastError
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
__stdio_common_vswprintf_s
ServiceMain
entry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ