ocrLogin
ocrQe
Static task
static1
Behavioral task
behavioral1
Sample
6419d4f677f9e1e1c56a0cec03e53853ad233457562302bc15a4c05058edbbe4.dll
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
6419d4f677f9e1e1c56a0cec03e53853ad233457562302bc15a4c05058edbbe4.dll
Resource
win10v2004-20230703-en
Target
6419d4f677f9e1e1c56a0cec03e53853ad233457562302bc15a4c05058edbbe4
Size
100KB
MD5
dd3f858fbb9d0edade26e276811ea6f4
SHA1
32c8c272be8865c7a4a1df96e4f4189535d5c9da
SHA256
6419d4f677f9e1e1c56a0cec03e53853ad233457562302bc15a4c05058edbbe4
SHA512
c504d7f6d00ff810bec572298676f4c4db72c653292dbe86e3c0cd85ba0ffbbf62a08b34d2225ed343c58d60288a0b22c4b8c7a5a9dc7aa905d1cb40984e9cd9
SSDEEP
1536:+u0XzJd7AFoOZLM2y+Vga2p40YQtu1am9BjtbZWmwOm12mWjUQ:+u0DJd7A5ZLMSOHzLmTjtwO5UQ
Checks for missing Authenticode signature.
resource |
---|
6419d4f677f9e1e1c56a0cec03e53853ad233457562302bc15a4c05058edbbe4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
LCMapStringA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateWaitableTimerA
SetWaitableTimer
CloseHandle
GetCurrentProcess
OpenProcess
LocalAlloc
LocalFree
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
PeekMessageA
GetMessageA
TranslateMessage
wsprintfA
MessageBoxA
MsgWaitForMultipleObjects
DispatchMessageA
_ftol
__CxxFrameHandler
realloc
modf
memmove
strncmp
atoi
_CIfmod
malloc
free
sprintf
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
VarR8FromBool
VarR8FromCy
SafeArrayAccessData
SysFreeString
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantInit
SafeArrayDestroyDescriptor
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
VariantCopy
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VariantChangeType
ocrLogin
ocrQe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ