DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0172c5dadddc9f8d8135b8ce8ffbb9580d56922141e0fee1c3a6d494588d5344.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0172c5dadddc9f8d8135b8ce8ffbb9580d56922141e0fee1c3a6d494588d5344.dll
Resource
win10v2004-20230831-en
Target
0172c5dadddc9f8d8135b8ce8ffbb9580d56922141e0fee1c3a6d494588d5344.bin
Size
110KB
MD5
68a4154d0d175446bd871d55e374bb7d
SHA1
5ce53ec1c040059c0a3decacf813efc8aa3f0ca9
SHA256
0172c5dadddc9f8d8135b8ce8ffbb9580d56922141e0fee1c3a6d494588d5344
SHA512
ecc5bbe27e3329b423cb14b336c6462542f9c5e86aa28cc5322cfd44dfb0d5a9824b2b43772429fad41edd43be81a91bc11e0569576077b42cba2cf0ec96a06b
SSDEEP
3072:v4aRZ5JOG3U/bcrUOkP3pM64OL/osaO+NlO:5IbTOkO64OLwhO+vO
Checks for missing Authenticode signature.
resource |
---|
0172c5dadddc9f8d8135b8ce8ffbb9580d56922141e0fee1c3a6d494588d5344.bin |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WTSEnumerateSessionsA
MoveFileExW
ExitProcess
lstrcpyW
WriteFile
GetTempPathW
lstrlenA
CreateFileW
GetFileAttributesW
lstrcatA
GetLastError
MoveFileExA
DeleteFileA
DeleteFileW
CloseHandle
Sleep
SetFileAttributesA
GetTempFileNameW
VirtualFree
VirtualAlloc
SetErrorMode
lstrcpyA
lstrcpynA
VirtualProtect
SetFileAttributesW
SetLastError
GetProcessHeap
FreeLibrary
IsBadReadPtr
GetModuleFileNameA
GetCurrentProcess
CreateProcessW
GetModuleFileNameW
lstrlenW
LocalFree
lstrcatW
GetProcAddress
LoadLibraryA
lstrcmpA
LocalAlloc
CreateThread
HeapFree
RegSetValueExA
RegDeleteValueA
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExW
RegQueryValueExA
RegCloseKey
RegDeleteValueW
CoUninitialize
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ