DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
37a79c27da2a8f306d642c590fccc61d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
37a79c27da2a8f306d642c590fccc61d.dll
Resource
win10v2004-20231215-en
Target
37a79c27da2a8f306d642c590fccc61d
Size
48KB
MD5
37a79c27da2a8f306d642c590fccc61d
SHA1
36cf4427cbc4503cee09b9a39d179244c0910e14
SHA256
bdcdb23027da9c49b1ced1343dbcadf365bc85697da80c12b3bcf3dcb9633ad5
SHA512
aa96f06f668e0fab22cb44ebf4aa32607d76da648657c8350af02e100259eac3508fba652742546347433d518d7668174b5d3ee89a69f352a405e75cb0782352
SSDEEP
768:eYbZHvCt/7bXjrTgS4dXLD4V+819syetCymGr7Vzj:e6NOTqLD4L9shAymGp
Checks for missing Authenticode signature.
resource |
---|
37a79c27da2a8f306d642c590fccc61d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
CloseHandle
GetLocalTime
Sleep
HeapAlloc
WideCharToMultiByte
Process32Next
Process32First
CreateToolhelp32Snapshot
GetWindowsDirectoryA
GetSystemDirectoryA
GetLastError
CreateEventA
GetCurrentProcessId
DeleteFileA
GetCommandLineW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CreateThread
WritePrivateProfileStringA
SetWindowTextA
SendMessageA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
IsWindow
CreateWindowExA
ShowWindow
FindWindowExA
KillTimer
SetTimer
PostMessageA
DefWindowProcA
CallNextHookEx
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
rand
_stricmp
strchr
fopen
fwrite
fclose
strlen
free
_initterm
malloc
_adjust_fdiv
_strlwr
strrchr
strstr
strcmp
strcpy
memcmp
memcpy
memset
??2@YAPAXI@Z
_purecall
sprintf
??3@YAXPAX@Z
_access
strcat
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ