DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4e7598cf300ada5857c979b61fe96154.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e7598cf300ada5857c979b61fe96154.dll
Resource
win10v2004-20231215-en
Target
4e7598cf300ada5857c979b61fe96154
Size
48KB
MD5
4e7598cf300ada5857c979b61fe96154
SHA1
e4f1b25ae331ddd5b19b9ec31413043eb43d271f
SHA256
75e7a9931b2637bfdf76617e2e646885ab67317e3bc25a94288bb3e461e332a4
SHA512
07c44df3a2f5f33776b6a81d83f2f5bc42184fce107c0c43b7b566521c67470e8a951131684d0d17f875b30976c61e60d43cf42a0b7a177f632b2b39b2ebf50f
SSDEEP
768:NCMTywLZbA2KlTNyfMHoM/O28UWQrEVFRGdcflpgqidPQve4zSQC:EMTyCZUNyfMXW2HfrE3RqcNpsuv0
Checks for missing Authenticode signature.
resource |
---|
4e7598cf300ada5857c979b61fe96154 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
DeleteCriticalSection
GetCommandLineW
GetCurrentProcessId
GetLocalTime
GetSystemDirectoryA
GetWindowsDirectoryA
CreateEventA
WritePrivateProfileStringA
Process32Next
Process32First
Sleep
CreateThread
WideCharToMultiByte
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
LoadLibraryA
GetProcAddress
GetLastError
DeleteFileA
PostMessageA
DefWindowProcA
IsWindow
CreateWindowExA
ShowWindow
RegisterClassExA
SetWindowTextA
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowExA
KillTimer
SetTimer
CallNextHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strcat
strchr
_strlwr
fopen
fwrite
fclose
strcmp
free
_initterm
malloc
_adjust_fdiv
_stricmp
rand
strcpy
strstr
strlen
sprintf
_access
strrchr
memcmp
memcpy
memset
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ