DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0b956aa932a01fa1aae5f5827a7cd6b0.dll
Resource
win7-20231129-en
Target
0b956aa932a01fa1aae5f5827a7cd6b0
Size
180KB
MD5
0b956aa932a01fa1aae5f5827a7cd6b0
SHA1
8245c4febf660fa7a563bb1295e90b84c792d06a
SHA256
c61dd0668bf33df6bc761609a0adf0f7f549df92c6a938fb9510e947432f7504
SHA512
f7be8130a6887bcd7d39c10d40b318780fd15069e217ffd47bc8f2f1c03ea2346a8d31315cde03de45d0cb3d345a1260a7f68bbbae504851419d0e7ce105d091
SSDEEP
3072:1yHBpnUSwA3O7poYFpPsPUZweiji0Vp20wqtOyvu5N:1CBpnlw0O7p6rLi8p2XZ8
Checks for missing Authenticode signature.
resource |
---|
0b956aa932a01fa1aae5f5827a7cd6b0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpAddRequestHeadersA
InternetCloseHandle
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetGetConnectedState
InternetConnectA
connect
closesocket
WSAStartup
gethostbyname
WSACleanup
inet_addr
socket
htons
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
VirtualQuery
FindAtomA
GetConsoleTitleA
GetCurrentThread
GetTempPathA
FreeLibrary
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
lstrcatA
lstrlenA
lstrcpyA
GetTickCount
GetLocalTime
GetVersion
lstrcpyW
lstrlenW
GetModuleFileNameA
ReadFile
GetFileSize
TerminateProcess
WaitForSingleObject
DeleteFileA
MultiByteToWideChar
lstrcmpA
lstrcpynA
lstrcpynW
lstrcatW
lstrcmpW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiA
CreateThread
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
HeapSize
GetStdHandle
SetHandleCount
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
SetLastError
TlsFree
TlsSetValue
Sleep
TlsAlloc
TlsGetValue
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetCPInfo
GetProcessHeap
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
GetSystemInfo
VirtualAlloc
RtlUnwind
GetSystemTimeAsFileTime
IsDebuggerPresent
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
UnregisterClassA
CharNextA
CharLowerA
wsprintfA
CharUpperW
CharUpperA
GetDC
GetClassLongA
GetCursor
IsWindowVisible
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
RegCloseKey
GetUserNameA
SHGetSpecialFolderPathA
ShellExecuteExA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ