DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
RegisterTrayIcon
RunTrayIcon
ShowDoneMessage
ShowWelcomePage
UnregisterTrayIcon
Static task
static1
Behavioral task
behavioral1
Sample
0fca9270da85bbaf9534f441114e6dcf.dll
Resource
win7-20231215-en
Target
0fca9270da85bbaf9534f441114e6dcf
Size
348KB
MD5
0fca9270da85bbaf9534f441114e6dcf
SHA1
5635d84ba7da10a14edf9e679694f85c3e657dc1
SHA256
1781e6b78c40090b828170602a87364bc72e02a9906f432853117ef79d1cb651
SHA512
5e52111fb5fb5985ecb8ce1ca0a2594ccaec81755c5603477a183f8010670ca8cd3cc8c7d7efa19b92988b55a4528535b07f20c8200433f58aadccaf57a354be
SSDEEP
6144:ILowojVF33t06qk8Bxh61HqyN9dCaVpJGoTPc:ILoXt060Bxh6K+9dCaVpJG4
Checks for missing Authenticode signature.
resource |
---|
0fca9270da85bbaf9534f441114e6dcf |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpQueryInfoA
InternetCrackUrlA
InternetQueryOptionA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
InternetGetConnectedState
HttpAddRequestHeadersA
StrToIntA
StrNCatA
StrRChrA
PathFileExistsA
wvnsprintfA
StrStrA
StrCmpNIA
wnsprintfA
StrStrIA
UuidCreate
UuidToStringA
InitCommonControlsEx
GetProcAddress
GetModuleHandleA
lstrlenA
WinExec
IsDBCSLeadByte
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
OpenProcess
CloseHandle
GetCurrentProcess
LocalFree
HeapFree
lstrcmpA
ExpandEnvironmentStringsA
GetModuleHandleW
SetThreadLocale
GetThreadLocale
LockResource
FindResourceExA
WriteFile
CreateFileA
TerminateThread
GetTickCount
TlsSetValue
TlsGetValue
ReleaseMutex
SleepEx
lstrcpyA
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVersionExA
GetVersion
HeapReAlloc
ResetEvent
CreateEventA
SetEvent
OpenEventA
FlushInstructionCache
VirtualAlloc
InterlockedIncrement
LoadLibraryA
VirtualFree
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
Process32Next
Process32First
CreateToolhelp32Snapshot
GlobalFree
GlobalAlloc
GetTempPathA
lstrlenW
GetCurrentProcessId
GetExitCodeProcess
CreateProcessA
DeleteFileA
ExitProcess
SetLastError
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
RtlUnwind
HeapSize
HeapDestroy
GetLastError
lstrcpynA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
GetStdHandle
GetStringTypeA
GetStringTypeW
SetHandleCount
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetStdHandle
GetModuleFileNameA
TlsAlloc
TlsFree
lstrcmpiA
GetProcessHeap
HeapAlloc
GetPrivateProfileStringA
InterlockedDecrement
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
VirtualProtect
FreeEnvironmentStringsW
DestroyWindow
RegisterClassExA
DefWindowProcA
RedrawWindow
SetActiveWindow
DrawAnimatedRects
GetWindowLongA
SetWindowLongA
CreateWindowExA
SetParent
FindWindowA
EnumChildWindows
SystemParametersInfoA
DrawMenuBar
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
RegisterWindowMessageA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
IsWindow
LoadStringA
LoadIconA
LoadImageA
DestroyIcon
SetTimer
KillTimer
GetWindowDC
ReleaseDC
CharNextW
GetShellWindow
GetWindowThreadProcessId
GetUserObjectSecurity
GetClientRect
GetWindowRect
GetCursorPos
SetCursorPos
mouse_event
CharNextA
MessageBoxA
SendMessageA
SetWindowPos
DispatchMessageA
TranslateMessage
GetMessageA
GetActiveWindow
LoadCursorA
GetSysColorBrush
UpdateWindow
ShowWindow
LoadMenuA
GetClassNameA
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDIBSection
CreateCompatibleDC
GetPixel
CreateProcessAsUserA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetNamedSecurityInfoA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
SetTokenInformation
GetLengthSid
ConvertStringSidToSidW
DuplicateTokenEx
RegQueryInfoKeyA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
IsValidSid
GetSecurityDescriptorOwner
OpenProcessToken
ConvertSidToStringSidA
RegOpenKeyA
CloseServiceHandle
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA
SHAppBarMessage
SHGetFolderPathA
Shell_NotifyIconA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
StringFromGUID2
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
OleSetContainedObject
OleCreate
OleUninitialize
OleInitialize
CoTaskMemAlloc
SysAllocStringLen
VariantInit
VariantClear
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
RegisterTrayIcon
RunTrayIcon
ShowDoneMessage
ShowWelcomePage
UnregisterTrayIcon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ