ServiceMain
entry
Static task
static1
Behavioral task
behavioral1
Sample
b66afa684dfdb723047e25ec43141fb0135bbb7c41e66f7d7d2fa9b0f5dc81e1.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b66afa684dfdb723047e25ec43141fb0135bbb7c41e66f7d7d2fa9b0f5dc81e1.dll
Resource
win10v2004-20241007-en
Target
b66afa684dfdb723047e25ec43141fb0135bbb7c41e66f7d7d2fa9b0f5dc81e1
Size
99KB
MD5
1c2787555f3212f6cdc130be547ffc03
SHA1
96cf5594157848cf52e4aac6b34d20844a68a158
SHA256
b66afa684dfdb723047e25ec43141fb0135bbb7c41e66f7d7d2fa9b0f5dc81e1
SHA512
c15d7b300ee1aa91cd60407fa93607fdca99f63b94bb3cfe1886940cd4b885fdc7cebaeafbf0af00849883b23e47ff34214b774b829af2c9b3e13c535cbfe39a
SSDEEP
1536:mASywOGdA1Tn1ShB5ONqQWApX5nleDaWBnUjBqE8FbYDm:mrb+T1SJHOpX5lTW9UdX8FbYD
Checks for missing Authenticode signature.
resource |
---|
b66afa684dfdb723047e25ec43141fb0135bbb7c41e66f7d7d2fa9b0f5dc81e1 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
CloseHandle
Sleep
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
RaiseException
GetLastError
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
__stdio_common_vswprintf_s
ServiceMain
entry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ