DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff84df76d0fe9ed1b17a312a28502c26.dll
Resource
win7-20231215-en
Target
ff84df76d0fe9ed1b17a312a28502c26
Size
64KB
MD5
ff84df76d0fe9ed1b17a312a28502c26
SHA1
5fff295d22d14ca3a9f4e182da7edc2b723e30f1
SHA256
42278a02fb41b7d6021d1d3af18f50d9b6c83216ea339a3b961addc8049278ad
SHA512
d23ed52777a2f6b12fe2f1c2ea49afb758c3b9482d55aa228aa27d443b7dacb86a10983f992b944f40f17d9b961e7ee471f272cc2adeaacc4648fe4574b5954a
SSDEEP
768:MZPXobxvyrZHU6tSNru3irstUUJbUS7RKPUSqC640qNhiJ800DRaF46al5/k:UPuyeu3ikDBS647iG0UaAdk
Checks for missing Authenticode signature.
resource |
---|
ff84df76d0fe9ed1b17a312a28502c26 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
WideCharToMultiByte
ExitProcess
Sleep
CloseHandle
CreateProcessA
RemoveDirectoryA
MultiByteToWideChar
MoveFileA
WritePrivateProfileStringA
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
CreateDirectoryA
Process32Next
Process32First
GetCommandLineW
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LocalFree
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
FreeLibrary
LoadLibraryA
CreateThread
RegSetValueExA
RegCreateKeyExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
SysFreeString
LoadRegTypeLi
SysStringLen
SysAllocString
VariantClear
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
memcpy
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
_wcslwr
wcsstr
atoi
_access
fopen
fseek
ftell
fread
fclose
strcpy
strlen
strncmp
sprintf
??3@YAXPAX@Z
strstr
memset
strrchr
strcat
_stricmp
_purecall
??2@YAPAXI@Z
memcmp
strncpy
strchr
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ