COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
6b61be979d14f05d12f6f7f0c8c6cf3a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b61be979d14f05d12f6f7f0c8c6cf3a.dll
Resource
win10v2004-20231222-en
Target
6b61be979d14f05d12f6f7f0c8c6cf3a
Size
26KB
MD5
6b61be979d14f05d12f6f7f0c8c6cf3a
SHA1
ca93a4465806a6ef76154973908ceb8199abe70b
SHA256
4b8f22305adcd2c0b3dd2d782e97ef834613200067da5b71e59b7f07a034d86f
SHA512
7966008a2a3dbdb78606588966685f551801cc83b6d9bdd1a419bd35ec516ffb7b8923804750eee9c7ff3af7259e0cece9206fd027f5e842ceada609aad69235
SSDEEP
384:U4jmyW/9N4NDN3VOjZk9oMhNGk2W577bopb8JzLvZa7xzaRI29BAii:lyyWIN3pCMhNGK57gpQJvQ7QR7Aii
Checks for missing Authenticode signature.
resource |
---|
6b61be979d14f05d12f6f7f0c8c6cf3a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
CreateThread
WaitForSingleObject
ReadFile
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
SetFileAttributesA
GetCommandLineA
CreateMutexA
DeleteFileA
CreateFileA
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
IsBadReadPtr
GetCurrentDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
Sleep
ExitProcess
GetParent
GetWindowThreadProcessId
EnumWindows
wsprintfA
GetWindowTextA
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
_access
strrchr
memset
strchr
atoi
strncpy
free
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
__dllonexit
strstr
malloc
??2@YAPAXI@Z
__CxxFrameHandler
strlen
strcmp
strcat
sprintf
memcpy
strcpy
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ