DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6b3a7198b07f35540c775ba81141ae85.dll
Resource
win7-20231129-en
Target
6b3a7198b07f35540c775ba81141ae85
Size
52KB
MD5
6b3a7198b07f35540c775ba81141ae85
SHA1
45f09a76ce1bde06a6d6fae544aee66b76a3cd7e
SHA256
661d0167248aa38fc6d93e471486964ba3434e7f3ea0b2a87dd1d91b6ef5a0c4
SHA512
253cc343656d8207bc3015867014c21a549d9750f9a6c63c76d545fc43d4306a7008c4c63cef0585b966961ab92e22c1258fa309a29258356f63947a3bf0bbda
SSDEEP
1536:SR5Wyc01jynT3L07uiO0HwdvMTiEZoc1fr:SXWZ01jB7G0Qd0Tisr
Checks for missing Authenticode signature.
resource |
---|
6b3a7198b07f35540c775ba81141ae85 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleHandleA
CloseHandle
CreateProcessA
GetSystemDirectoryA
Process32Next
Process32First
GetCommandLineW
Sleep
MoveFileA
DeleteFileA
SetFileAttributesA
FindNextFileA
HeapDestroy
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
LocalFree
ExitProcess
CreateDirectoryA
CreateThread
WritePrivateProfileStringA
RemoveDirectoryA
GetCurrentProcessId
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetPrivateProfileStringA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strncmp
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strcmp
_access
atoi
strcat
??3@YAXPAX@Z
memcmp
sprintf
memcpy
_purecall
??2@YAPAXI@Z
memset
strcpy
strncpy
strchr
_strupr
strlen
strstr
wcsstr
_wcslwr
strrchr
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ