DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1a4ef0c17d65a7be1e20cbef5cf01d8b.dll
Resource
win7-20231215-en
Target
1a4ef0c17d65a7be1e20cbef5cf01d8b
Size
68KB
MD5
1a4ef0c17d65a7be1e20cbef5cf01d8b
SHA1
fdc9eaaf237e403bab40b256079d48f4ea39584b
SHA256
dbbfc4311173a20a0bc0a8c335998bd8542774dde274ee370ff7f7dd6003f8a7
SHA512
d0f27dd02fd12e7bae13c210ef91040c323991ae75f5669f0a78f43a6ab8280e80615be8ba8c98ef4c48c6004d7778e38167cafe2d92dfb858675cf76a957d24
SSDEEP
1536:7nPtEEZrMi95yRumTLdA28RY5J+2FkVDTxKbS7:WEHo8s+xVDTxJ7
Checks for missing Authenticode signature.
resource |
---|
1a4ef0c17d65a7be1e20cbef5cf01d8b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
DeleteFileA
GetModuleFileNameA
DisableThreadLibraryCalls
CreateThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
CopyFileA
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetTempFileNameA
GetTempPathA
GetLocalTime
MultiByteToWideChar
LocalFree
GetLastError
WideCharToMultiByte
lstrlenW
HeapDestroy
lstrcpyA
GetMessageA
MessageBoxA
CharNextA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
ShellExecuteA
CoCreateInstance
SafeArrayCreateVector
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SafeArrayAccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
URLDownloadToFileA
_stricmp
??1type_info@@UAE@XZ
_onexit
__dllonexit
_adjust_fdiv
_initterm
_CxxThrowException
wcslen
fseek
ftell
rewind
fread
_itoa
realloc
memcmp
memcpy
_purecall
fopen
fgets
abs
??3@YAXPAX@Z
strstr
memset
strlen
??2@YAPAXI@Z
strcat
strcpy
strcmp
free
malloc
fclose
strncpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ