CPlApplet
EnableExecuteProtectionSupportW
ModifyExecuteProtectionSupportW
NoExecuteAddFileOptOutList
NoExecuteAddFileOptOutListW
NoExecuteProcessExceptionW
NoExecuteRemoveFileOptOutList
NoExecuteRemoveFileOptOutListW
Static task
static1
Behavioral task
behavioral1
Sample
3d19f3d9381047576c14036b3278e8c4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d19f3d9381047576c14036b3278e8c4.dll
Resource
win10v2004-20231215-en
Target
3d19f3d9381047576c14036b3278e8c4
Size
418KB
MD5
3d19f3d9381047576c14036b3278e8c4
SHA1
9415c2f44aa042c45106b2e1fa6dc1d56a989fda
SHA256
dd5e4c7d5a19f6f99be9f2b005ccfce2812d843dd1ffb6aa7487a1b30f5b53dd
SHA512
eef675ab26280ed825a08bda5e3283fc30fafdedb00530305334d9e2cb891ad0d61a083247fd9c2685c902198c01bca4ec1e5e0b486c5b95b177dac6d87b4ebf
SSDEEP
6144:TDo5unMX1eckE5b9rUIYT1yGOUEms767RoWVE4UZMpRKZ/:TDo59ecky9QIYTUTGsmlbeX
Checks for missing Authenticode signature.
resource |
---|
3d19f3d9381047576c14036b3278e8c4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
toupper
isalpha
wcstoul
wcscpy
_ultow
wcslen
iswctype
wcspbrk
_ftol
_vsnwprintf
ceil
wcsncpy
_vsnprintf
_wcsicmp
strchr
_snwprintf
wcsncmp
_wtoi
wcsstr
wcscat
??3@YAXPAX@Z
__CxxFrameHandler
tolower
_except_handler3
_wcsnicmp
??2@YAPAXI@Z
RtlFreeUnicodeString
RtlInitUnicodeString
RtlCopySid
NtQueryInformationToken
RtlConvertSidToUnicodeString
RtlAdjustPrivilege
RtlGetNtProductType
NtQuerySystemInformation
NtCreatePagingFile
RtlGetSetBootStatusData
RtlLockBootStatusData
RtlUnlockBootStatusData
NtSetSystemInformation
NtClose
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlLengthSid
GetDlgItemTextW
SetWindowLongW
SetDlgItemTextW
GetFocus
SetFocus
EnableWindow
wsprintfW
GetWindowLongW
WinHelpW
DialogBoxParamW
SendDlgItemMessageW
DestroyIcon
EndDialog
GetSystemMetrics
ShowCursor
LoadCursorW
SetCursor
GetDlgItem
GetDC
ReleaseDC
wvsprintfW
SendMessageW
MessageBoxW
RegisterWindowMessageW
LoadStringW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
PostMessageW
GetParent
GetDlgItemInt
SetDlgItemInt
CharUpperW
MapDialogRect
SendMessageTimeoutW
GetClientRect
MessageBeep
IsWindowEnabled
SetWindowTextW
GetKeyboardType
SendMessageA
CharLowerW
SetTimer
SetWindowPos
MapWindowPoints
GetWindowRect
ShowWindow
LoadImageW
RegisterClipboardFormatW
ScreenToClient
GetWindowTextLengthW
LoadIconW
GetMessagePos
GetDeviceCaps
SelectObject
DeleteObject
CreateFontIndirectW
GetTextExtentPointW
GetObjectW
CoInitialize
CoCreateInstance
ReleaseStgMedium
CoInitializeSecurity
CoUninitialize
VariantClear
SysFreeString
SysAllocString
CreatePropertySheetPageW
ord365
ord358
PropertySheetW
ord361
ord359
ord355
ord363
InitCommonControlsEx
ord362
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetTempPathW
GetTempFileNameW
CopyFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetFileAttributesExW
GlobalUnlock
SetLastError
LoadLibraryExW
GetACP
GetSystemDefaultLangID
_lopen
_llseek
_lread
_lclose
SetFileAttributesA
_lcreat
_lwrite
GetFullPathNameW
GetWindowsDirectoryW
lstrcpynW
WritePrivateProfileStringW
WideCharToMultiByte
WritePrivateProfileSectionA
GetSystemDirectoryW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileSectionA
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
GlobalLock
LoadLibraryExA
FreeLibrary
LoadLibraryW
lstrcmpW
CloseHandle
LocalFree
LocalReAlloc
LocalAlloc
GetCurrentProcess
lstrlenW
FindClose
FindNextFileW
DeleteFileW
RemoveDirectoryW
lstrcmpiW
SetFileAttributesW
GetLastError
FindFirstFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GlobalFree
GlobalReAlloc
GlobalAlloc
lstrcpyW
CreateDirectoryW
GetVolumeInformationW
GetProcAddress
lstrcatW
FormatMessageW
LocalLock
LocalUnlock
LocalHandle
CreateMutexW
GetVersionExW
DeviceIoControl
CreateFileW
GetDriveTypeW
QueryDosDeviceW
GetDiskFreeSpaceW
GetSystemInfo
GetFileAttributesW
GlobalMemoryStatusEx
GetLogicalDrives
GetEnvironmentVariableW
ExpandEnvironmentStringsW
lstrlenA
lstrcatA
MultiByteToWideChar
OpenProcessToken
RegSaveKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegLoadKeyW
RegUnLoadKeyW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegOpenKeyExW
RegCloseKey
RegSetKeySecurity
RegCreateKeyW
RegOpenKeyW
RegEnumKeyW
RegGetKeySecurity
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
InitializeAcl
AddAccessAllowedAce
GetAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetLengthSid
CopySid
LookupAccountSidW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
StartServiceW
GetUserNameW
RegFlushKey
SHBrowseForFolderW
SHGetPathFromIDListW
ord195
ShellExecuteExW
ord680
ExtractIconW
ord100
ord258
ord168
ord167
ord730
ord169
ord259
StrCmpIW
StrFormatByteSizeW
PathFileExistsW
ord16
StrCatBuffW
SHRegGetUSValueW
SHRegSetUSValueW
ord437
StrToIntExW
AssocQueryStringW
SHGetValueW
wnsprintfW
StrCpyNW
SHRegGetBoolUSValueW
ord124
DeleteProfileW
UuidToStringW
RpcStringFreeW
UuidCreate
ImmAssociateContext
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetOpenFileNameW
ScriptIsComplex
UnMapAndLoad
MapAndLoad
pSetupDoesUserHavePrivilege
pSetupIsUserAdmin
CPlApplet
EnableExecuteProtectionSupportW
ModifyExecuteProtectionSupportW
NoExecuteAddFileOptOutList
NoExecuteAddFileOptOutListW
NoExecuteProcessExceptionW
NoExecuteRemoveFileOptOutList
NoExecuteRemoveFileOptOutListW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ