DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
27cb6acb662b18499df7da19ceb383ea.dll
Resource
win7-20231215-en
Target
27cb6acb662b18499df7da19ceb383ea
Size
76KB
MD5
27cb6acb662b18499df7da19ceb383ea
SHA1
e86eacd18c8d8029c281a145d90a1bd83da497d6
SHA256
e05c4387c4bba1107038857b1954e56dcf6514e2f9ddf2987b9307b22299c8f1
SHA512
e59bfcaebb2703d2dcf2e9524512097ee452307ef3782dfc1a52689f359ccec90b9fd0e0ddabc03a45323de6f9d3e7a90932b1580adfbd7966ec742c85a1fc54
SSDEEP
1536:jJBJ2zqrJA75m8Z/2oX9IPHCqgMJrdi2P3kZOb:/JR+wBrdiK3kwb
Checks for missing Authenticode signature.
resource |
---|
27cb6acb662b18499df7da19ceb383ea |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
LocalFree
GetProcAddress
LoadLibraryA
MultiByteToWideChar
lstrlenA
RemoveDirectoryA
FreeLibrary
MoveFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
GetCommandLineW
Process32First
Process32Next
Sleep
lstrlenW
WideCharToMultiByte
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
WritePrivateProfileStringA
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetExitCodeProcess
CreateDirectoryA
RegDeleteKeyA
RegEnumKeyExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strncmp
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
atoi
memcpy
memcmp
strcmp
strrchr
memset
sprintf
strstr
strcat
strlen
??3@YAXPAX@Z
strncpy
strchr
_strlwr
strcpy
wcsstr
_wcslwr
_access
??2@YAPAXI@Z
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ