DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
auPGTNuVAVUdj
Static task
static1
Behavioral task
behavioral1
Sample
23134dc1c02be9c2891aa3d28bda0e08.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23134dc1c02be9c2891aa3d28bda0e08.dll
Resource
win10v2004-20231222-en
Target
23134dc1c02be9c2891aa3d28bda0e08
Size
44KB
MD5
23134dc1c02be9c2891aa3d28bda0e08
SHA1
7676e9a7fcdbc2bb82e89213b11bae73e3f46ba3
SHA256
75e6c4e94b3de94291020f5866cc3b4a1c2fb11e79f280d8899e349faeb9f0b0
SHA512
f5661ead25fa19a9a4fef606ddb87ac4eb9662c51e24b3914e19f8a061cd90e3f18cde84b24fa296e740a0b104dc7fc6e8fd831be492c5d9569e5ff45a5c2828
SSDEEP
768:MQ5dpJokJcWIpkav+hrdcsCIlkHm+gLa1o0:MQPpJokJNFdLombLa+0
Checks for missing Authenticode signature.
resource |
---|
23134dc1c02be9c2891aa3d28bda0e08 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetLastError
CreateMutexA
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
CreateThread
VirtualAlloc
InterlockedIncrement
GetWindowsDirectoryA
WinExec
GetLocalTime
LoadLibraryA
GetProcAddress
CreateWindowExA
ShowWindow
KillTimer
SetTimer
CallNextHookEx
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
FindWindowExA
PostMessageA
UnhookWindowsHookEx
SetWindowsHookExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
strrchr
_except_handler3
strchr
fopen
_stricmp
fwrite
fclose
__CxxFrameHandler
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
auPGTNuVAVUdj
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ