DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7c8b02af25225c696c2b8dd600d31aa5.dll
Resource
win7-20231215-en
Target
7c8b02af25225c696c2b8dd600d31aa5
Size
200KB
MD5
7c8b02af25225c696c2b8dd600d31aa5
SHA1
b574f43db98280b615672f8e0dccb7088d699305
SHA256
bdded997d1d45df8700a343bc4a41c22b0e9d055e8f8c1f54e4c34afe52d75ec
SHA512
dcc5502ecab35f6bfd06e96151283c470fec92378c756988d19159d1058bf5e2b611c0cd564e49604374bb71d574ac8570c4e726375ee62bbb3d7b8de94e64fe
SSDEEP
3072:zJkY7naHI/G270sovsxlXcMq8LTwDU9Glwf30l7H0lrxF:mYv+y08rbfgU9G2sClFF
Checks for missing Authenticode signature.
resource |
---|
7c8b02af25225c696c2b8dd600d31aa5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
FreeLibrary
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
FlushFileBuffers
GetDiskFreeSpaceExA
CreateFileMappingA
SetFilePointer
OpenProcess
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFileAttributesA
OpenMutexA
GetVolumeInformationA
GetProcAddress
GetModuleFileNameA
CreateFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetShortPathNameA
LoadLibraryA
WaitForSingleObject
CreateProcessA
CreateProcessW
GetBinaryTypeA
GetLogicalDriveStringsA
GetFileAttributesA
SearchPathA
CopyFileA
GetProcessHeap
GetSystemTimeAsFileTime
DeviceIoControl
SetStdHandle
IsBadCodePtr
IsBadReadPtr
lstrcpyA
InterlockedExchange
lstrcpynA
lstrcmpiA
lstrlenA
GetLastError
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetStringTypeW
GetStringTypeA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetOEMCP
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetCurrentThreadId
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetCurrentProcess
CharNextA
GetTextCharsetInfo
OpenServiceA
QueryServiceStatus
CreateProcessAsUserW
GetUserNameA
OpenSCManagerA
OpenServiceW
CloseServiceHandle
RegQueryValueExA
OpenProcessToken
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
StringFromCLSID
StringFromGUID2
SysFreeString
SysStringLen
LoadRegTypeLi
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ