DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
380a008c6ded4cb007d62f0b69f98f8f.dll
Resource
win7-20231129-en
Target
380a008c6ded4cb007d62f0b69f98f8f
Size
52KB
MD5
380a008c6ded4cb007d62f0b69f98f8f
SHA1
b62ff9af626acd3bf81391813f7000339faa308d
SHA256
e6cebf087987a6d94224eefb756f9cd5b6b83beb7a0f30f3b4317ea137f9acb3
SHA512
69cd8fefff22db8cb73c7f28bdc80a94477b64538ab114298472d6b03946920ac6cd501c1e34623547ea31b12d9d8a3943305efcf054177a8ac977d199d80f6d
SSDEEP
768:uL01/8tW++8zTXBtrW7ludhCi9dQaPr11MIJngjT+VnZZ0yhCBofg/fCpYYgXLrW:oA/8tW+304nvrZg+RwfBh/6YY0rx6P
Checks for missing Authenticode signature.
resource |
---|
380a008c6ded4cb007d62f0b69f98f8f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
lstrlenW
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
Process32Next
Process32First
CreateThread
GetCommandLineW
WritePrivateProfileStringA
SetFileAttributesA
LocalFree
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
CreateDirectoryA
lstrlenA
MultiByteToWideChar
Sleep
ExitProcess
GetModuleFileNameA
MoveFileA
ControlService
DeleteService
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CommandLineToArgvW
SHGetSpecialFolderPathA
SHChangeNotify
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysFreeString
SysAllocString
VariantClear
??3@YAXPAX@Z
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
memcpy
??2@YAPAXI@Z
memcmp
_wcslwr
sprintf
strcmp
strrchr
strncpy
strchr
memset
strncmp
strlen
strcpy
_strlwr
_access
strcat
strstr
atoi
wcsstr
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ