DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0482ba3fb8d0c5f695738b1368e08510.dll
Resource
win7-20231215-en
Target
0482ba3fb8d0c5f695738b1368e08510
Size
64KB
MD5
0482ba3fb8d0c5f695738b1368e08510
SHA1
7baaa46fa99267214ba2f2223eb39907baaa0dcd
SHA256
910b9c7185032a6a0ffdc806cc0e600d55e5a24399fd5d7fe650c578c8a7c26b
SHA512
da71200b3980ea584fa5216a2d17f7d104bc04b5a725165f774cc165a7eaeba02027a5177216da438037d035cb2d89efe076c45f4a9d4510bdb2b050a74997d4
SSDEEP
1536:y72Y5/aCZ1AYe33mJNRGx+E8ijfPaInMk:HK1A0LG4ijfSInn
Checks for missing Authenticode signature.
resource |
---|
0482ba3fb8d0c5f695738b1368e08510 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetPrivateProfileStringA
FindFirstFileA
ExitProcess
Sleep
GetProcAddress
CreateDirectoryA
LocalFree
WritePrivateProfileStringA
LeaveCriticalSection
EnterCriticalSection
CreateProcessA
RemoveDirectoryA
GetExitCodeProcess
SetFileAttributesA
GetSystemDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
MoveFileA
DeleteFileA
FindNextFileA
CreateThread
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetCurrentProcessId
Process32First
Process32Next
CloseHandle
LoadLibraryA
GetCommandLineW
FreeLibrary
WaitForSingleObject
RegCreateKeyExA
RegQueryInfoKeyA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_wcslwr
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
strcmp
??2@YAPAXI@Z
atoi
strcpy
??3@YAXPAX@Z
sprintf
memcmp
memcpy
strstr
memset
strrchr
strcat
wcsstr
_strlwr
strncpy
strchr
strncmp
strlen
_access
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ