AddNetPlaceRunDll
ClearAutoLogon
DllCanUnloadNow
DllGetClassObject
DllInstall
DllMain
DllRegisterServer
DllUnregisterServer
NetAccessWizard
NetPlacesWizardDoModal
PassportWizardRunDll
PublishRunDll
SHDisconnectNetDrives
UsersRunDll
Static task
static1
Behavioral task
behavioral1
Sample
c3367556d5ff4ad097dcf99ba0377ac7abb00c80d465bf9d51e493919c040ee4.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c3367556d5ff4ad097dcf99ba0377ac7abb00c80d465bf9d51e493919c040ee4.dll
Resource
win10v2004-20230703-en
Target
c3367556d5ff4ad097dcf99ba0377ac7abb00c80d465bf9d51e493919c040ee4
Size
70KB
MD5
c44b118e2ff309a2638b64ebc1dd13f5
SHA1
0fd3989a7cf81dbaa34fd8e72cc6e4288ddf2058
SHA256
c3367556d5ff4ad097dcf99ba0377ac7abb00c80d465bf9d51e493919c040ee4
SHA512
6d1c83bee7c5ebd5159b3de021772ce0d59b4db1952e6ce926a6f7f4c4c3b7b1e5ed37bd354eba377c020782b9c139a057a7d5a7561e54b9669560c7eb868649
SSDEEP
1536:sBB1ERKa52HXqEo16Vc4inA9Ozke0hN/:wUR35EXs16Vcghp
Checks for missing Authenticode signature.
resource |
---|
c3367556d5ff4ad097dcf99ba0377ac7abb00c80d465bf9d51e493919c040ee4 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DbgPrint
RtlRaiseException
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WNetCancelConnection2W
WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
memmove
memset
strncmp
vfprintf
CopyImage
DestroyIcon
DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetSystemMetrics
LoadImageW
LoadStringW
SendMessageW
AddNetPlaceRunDll
ClearAutoLogon
DllCanUnloadNow
DllGetClassObject
DllInstall
DllMain
DllRegisterServer
DllUnregisterServer
NetAccessWizard
NetPlacesWizardDoModal
PassportWizardRunDll
PublishRunDll
SHDisconnectNetDrives
UsersRunDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ