DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
228ac221c57444f683447902f5f4ef95.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
228ac221c57444f683447902f5f4ef95.dll
Resource
win10v2004-20231215-en
Target
228ac221c57444f683447902f5f4ef95
Size
48KB
MD5
228ac221c57444f683447902f5f4ef95
SHA1
cfed84aaf31bb11db41e93acece8cde134bf6273
SHA256
bcf6cdc042eacec55de3b5fca9ae59cd323a0ff4d9664cefea7542a76e50b4a3
SHA512
ac0a4ebd0929aed02c1b71011fead332f8f5886b95f20762c63dec6b51133aa87a2dccc8a7a0810f1bcb45b81bb640ffddf709146e6c06c4d636bde9b3b4d9de
SSDEEP
768:vonQIPKg9x5dHjWkMLRoaOviE/ZdyOdziQ9QpedQou78DmZl2I4hRDXYgeCiEb:4QIK+xGaJi6i0iuOuQouPz2I4hRDBeCz
Checks for missing Authenticode signature.
resource |
---|
228ac221c57444f683447902f5f4ef95 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateEventA
GetCurrentProcessId
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetLastError
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetLocalTime
GetCommandLineW
Sleep
CreateThread
WideCharToMultiByte
GetWindowsDirectoryA
CloseHandle
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetVersionExA
WritePrivateProfileStringA
CreateWindowExA
ShowWindow
CallNextHookEx
SetWindowTextA
SendMessageA
KillTimer
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
IsWindow
DefWindowProcA
FindWindowExA
PostMessageA
SetTimer
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
fopen
_strlwr
fwrite
fclose
strcmp
memcmp
_purecall
free
_initterm
malloc
_adjust_fdiv
_stricmp
strchr
strstr
strrchr
??2@YAPAXI@Z
memset
strcpy
??3@YAXPAX@Z
strcat
_access
sprintf
rand
memcpy
strlen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ