DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WinlogonUnlockEvent
Static task
static1
Behavioral task
behavioral1
Sample
40a0e49c2e4cab25c8bb9b48ea9b3327.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
40a0e49c2e4cab25c8bb9b48ea9b3327.dll
Resource
win10v2004-20231215-en
Target
40a0e49c2e4cab25c8bb9b48ea9b3327
Size
381KB
MD5
40a0e49c2e4cab25c8bb9b48ea9b3327
SHA1
bb296af67962c92eb07d2df1d164c510e9482a1c
SHA256
93a16ec6e0743150cebd05fbd947abf1536af2ba630cdaed463e8e48f3be41b4
SHA512
3d4d8520de3d307b62060082d116eccf98c05cd15b225ef52d3b73a7dad1ffddb3b250dbdcc99fc371c827af54b7ecb3d07333d74aa5a5bf8c00b5945e7694d8
SSDEEP
6144:jcbog7OxZnDWRqsD2uOEZFNcBAhajqbX10w3OyAUgfblKB:XgunKMsDceQAwubesBqlg
Checks for missing Authenticode signature.
resource |
---|
40a0e49c2e4cab25c8bb9b48ea9b3327 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
SetEvent
OpenEventA
LocalFree
FormatMessageA
CreateMutexA
WaitForSingleObject
ReleaseMutex
WideCharToMultiByte
lstrlenW
RaiseException
lstrlenA
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleW
InterlockedDecrement
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetProcessHeap
FlushFileBuffers
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
SetLastError
GlobalFree
MultiByteToWideChar
GetModuleHandleA
GetLastError
GetSystemPowerStatus
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
GetVersionExA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
IsDBCSLeadByte
lstrcmpiA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
RtlUnwind
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
HeapDestroy
VirtualFree
HeapReAlloc
HeapSize
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
ReadFile
ChangeDisplaySettingsA
PostMessageA
GetSystemMetrics
EnumDisplayDevicesA
RegisterWindowMessageA
CharNextW
CharNextA
BroadcastSystemMessageA
EnumDisplaySettingsA
ExtEscape
CreateDCA
DeleteDC
GetDeviceCaps
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
GetSecurityInfo
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityInfo
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExW
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WinlogonUnlockEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ