DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
316dfd3dcbc6441da899fdafdc3773fd.dll
Resource
win7-20231129-en
Target
316dfd3dcbc6441da899fdafdc3773fd
Size
36KB
MD5
316dfd3dcbc6441da899fdafdc3773fd
SHA1
8f7290f944b96a571a34ab598cb3495980b35ee9
SHA256
5a51be4b56999f76ed75aa1b1797d805057ce69972ddf4dcb357e92a5b6dba5f
SHA512
e2196fdec9ab584f95534459c03eb59c9a5c08c5e83f77f67d789c1f3695fce18df514cea4debc53bbf9bedce33eed1507c754d80cc269fe2034f916e8056da9
SSDEEP
384:4sC16j3+NAoHpW9bZyDuWw5BYXJLFvSpdr+w0MyMK4o0DJp6e:4sC6jOSgA9bZyNw5BwJ4/rz0Lfj0FpN
Checks for missing Authenticode signature.
resource |
---|
316dfd3dcbc6441da899fdafdc3773fd |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommandLineW
LeaveCriticalSection
EnterCriticalSection
CreateThread
ExitProcess
MoveFileA
DeleteFileA
SetFileAttributesA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
GetExitCodeProcess
GetModuleFileNameA
CreateProcessA
GetSystemDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FreeLibrary
LoadLibraryA
Sleep
GetCurrentProcessId
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
FindFirstFileA
WaitForSingleObject
FindNextFileA
SetWindowTextA
IsWindow
SendMessageA
FindWindowExA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
_stricmp
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
_purecall
memset
strcpy
strstr
strlen
??3@YAXPAX@Z
memcpy
memcmp
strcat
strrchr
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ