BootInit
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0feae5fe89fcae53cb0b7d60e14e8961.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0feae5fe89fcae53cb0b7d60e14e8961.dll
Resource
win10v2004-20231215-en
Target
0feae5fe89fcae53cb0b7d60e14e8961
Size
188KB
MD5
0feae5fe89fcae53cb0b7d60e14e8961
SHA1
abc217cbbf7a92308ef8788020168828eeb94b7d
SHA256
f00ff26ba523a87d788d9edc941b3fbd32db78580018c31e265b8146e9d39693
SHA512
3d0e76ef7a4ed70f6a364f2c1bc27a488c9f60d52151d6426cfb8c90a77ed0c0b13018526a3a0eb906581cfa0dc387a3d43b0c7851a966998fad5d63f48129ec
SSDEEP
3072:H3hWRZKAkdPeiASVSNyc5zxfXC/ZbWquOqfKqjJSyOS/MyEwx:H3hWDKAWPT1CB8mvCqUy7MC
Checks for missing Authenticode signature.
resource |
---|
0feae5fe89fcae53cb0b7d60e14e8961 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
URLDownloadToFileA
lstrcpyA
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
HeapDestroy
DisableThreadLibraryCalls
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleHandleA
GetShortPathNameA
GetFileSize
ReadFile
lstrlenW
GlobalAlloc
MultiByteToWideChar
GetCurrentThreadId
GetProcAddress
lstrcatA
FlushInstructionCache
GetCurrentProcess
LoadResource
FindResourceA
LeaveCriticalSection
EnterCriticalSection
CloseHandle
CreateFileA
lstrcmpA
DeleteFileA
GetVersionExA
GetModuleFileNameA
LocalFree
InterlockedIncrement
lstrlenA
GlobalLock
GlobalUnlock
InterlockedDecrement
LoadImageA
DispatchMessageA
MoveWindow
GetDesktopWindow
CreateAcceleratorTableA
SetCursor
GetParent
GetFocus
DestroyMenu
TrackPopupMenu
CreatePopupMenu
MapWindowPoints
GetWindowRect
SetRectEmpty
DrawTextA
GetWindowDC
TranslateMessage
GetKeyState
GetWindowTextA
SetWindowTextA
SendMessageA
SetWindowPos
GetWindowTextLengthA
SetWindowLongA
GetWindowLongA
CallWindowProcA
MessageBoxA
LoadStringA
DestroyWindow
IsWindow
DefWindowProcA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
ShowWindow
CharNextA
GetDlgItem
InvalidateRgn
SetCapture
ReleaseCapture
SystemParametersInfoA
CreateWindowExA
GetClassNameA
RedrawWindow
DrawFrameControl
BeginPaint
GetClientRect
EndPaint
GetDC
IsChild
SetFocus
GetWindow
RegisterWindowMessageA
GetTopWindow
AppendMenuA
FillRect
GetSysColor
FrameRect
InflateRect
DrawEdge
OffsetRect
GetSystemMetrics
ReleaseDC
GetSysColorBrush
GetMenuItemInfoA
InvalidateRect
UpdateWindow
CreateCompatibleDC
DeleteObject
GetObjectA
CreateFontA
SelectObject
CreateFontIndirectA
DeleteDC
SetBkMode
SetBrushOrgEx
SetBkColor
SetTextColor
CreatePatternBrush
CreateBitmap
PatBlt
CreateCompatibleBitmap
BitBlt
CreateDIBSection
GetDeviceCaps
CreateSolidBrush
GetStockObject
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
ReleaseStgMedium
CoCreateInstance
CoInitialize
CoUninitialize
RegisterDragDrop
OleRun
CreateStreamOnHGlobal
OleInitialize
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CoTaskMemRealloc
OleUninitialize
CLSIDFromProgID
CLSIDFromString
GetErrorInfo
LoadRegTypeLi
SysAllocString
SysAllocStringByteLen
SysFreeString
VariantClear
VariantCopy
DispCallFunc
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
VariantInit
SysStringLen
OleCreateFontIndirect
SysAllocStringLen
VariantChangeType
SysStringByteLen
ImageList_LoadImageA
ImageList_Destroy
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Draw
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
__CxxFrameHandler
??2@YAPAXI@Z
_CxxThrowException
memcmp
free
fopen
memcpy
strlen
difftime
time
_ftol
mktime
localtime
_beginthread
_purecall
fclose
fgetc
memset
wcstol
_itoa
wcstod
strtok
wcscmp
malloc
realloc
wcscpy
wcslen
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
BootInit
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ