DllCanUnloadNowW
DllRegisterServerW
DllShowWinDlg
DllUnregisterServerW
SmartStart
Static task
static1
Behavioral task
behavioral1
Sample
f9eef7364ae113109975516aadd2a92d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f9eef7364ae113109975516aadd2a92d.dll
Resource
win10v2004-20231222-en
Target
f9eef7364ae113109975516aadd2a92d
Size
33KB
MD5
f9eef7364ae113109975516aadd2a92d
SHA1
f3cbc4cdea487e921053f2989cc31ec520f33c5a
SHA256
d4623d5a4b56f8328a29b0d7a42504a3a82f787f4d2d2957f288991ac86fbc9f
SHA512
5ecd3a7037755e00b19a2744b50f75d09a3e4417749ac8dc9db4c79ec307b563a2961285fb739e829704f97e637073dd4ae80f605c0cdaf5d428078ad73fcc18
SSDEEP
768:8w/goyZgoUrnZ94COw0mEujKJ1oXktvlO:xOZgoUzZkw01CMocl
Checks for missing Authenticode signature.
resource |
---|
f9eef7364ae113109975516aadd2a92d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateNamedPipeA
CreateEventA
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
DeleteFileA
WriteFile
CreateFileA
ReadFile
CreateThread
ConnectNamedPipe
GetCurrentProcess
GetStartupInfoA
WinExec
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
TerminateThread
CloseHandle
Sleep
HeapFree
DisconnectNamedPipe
SetEvent
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetStdHandle
wsprintfA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CreateProcessAsUserA
URLDownloadToFileA
InternetConnectA
HttpQueryInfoA
InternetReadFile
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
DllCanUnloadNowW
DllRegisterServerW
DllShowWinDlg
DllUnregisterServerW
SmartStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ