DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1fad7ffad1c81fd89e3072d73721239c.dll
Resource
win7-20231215-en
Target
1fad7ffad1c81fd89e3072d73721239c
Size
44KB
MD5
1fad7ffad1c81fd89e3072d73721239c
SHA1
84db6732656ad2cabed662201081463ab8efdff9
SHA256
7dff224a2b137e2fa2482f9d014b71012ba17e7bec843106a194fe43c876caba
SHA512
a1b3fa6ad99a37f1005829598fd66e51426fa43ee6d76373aaa8c357b76d60ca330235fc7628d1a9545f4cf86b2d3f3efa2896cf9c2721536c218e4d52f43be6
SSDEEP
768:mb2a0P2bp/SQHZYlqwKJBIHLDYeSkznOw:mD0ubJiQdDIHLDJrznH
Checks for missing Authenticode signature.
resource |
---|
1fad7ffad1c81fd89e3072d73721239c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
lstrlenA
FindNextFileA
FindFirstFileA
GetCommandLineW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
FreeLibrary
MoveFileA
DeleteFileA
SetFileAttributesA
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
ExitProcess
Process32Next
Process32First
Sleep
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
CreateThread
EnterCriticalSection
LeaveCriticalSection
GetShortPathNameA
GetCurrentProcessId
SetWindowTextA
IsWindow
FindWindowExA
SendMessageA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strncpy
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
_wcslwr
wcsstr
_purecall
memcpy
strcat
strrchr
memcmp
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
strlen
memset
sprintf
_strupr
strchr
strncmp
strcpy
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ