DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
056901dbc4713fbff2d5db040fc07949.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
056901dbc4713fbff2d5db040fc07949.dll
Resource
win10v2004-20231215-en
Target
056901dbc4713fbff2d5db040fc07949
Size
312KB
MD5
056901dbc4713fbff2d5db040fc07949
SHA1
9817c173a32b2b89e5b148524538b79e76369a56
SHA256
1e3f9abb83b17f7a76600cf0db075d7c408a6eeaabd1203e326c8a4bfae7e5f2
SHA512
6f4fdc826e6f4e9d37660efabba1c0efd378b00b3bb0bf074bb263ce7726e41d6be47529dac936fde0c698ee78618ad55c869d2f3e94994c9acf9e5fac9ddc05
SSDEEP
6144:CMoufzbWua0EvvTbZonJfIcPyBwnj51aY0icQ1z86lMXp4O:R2T9AcQBblMh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
056901dbc4713fbff2d5db040fc07949 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
FindFirstFileA
FindNextFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
GetExitCodeProcess
TerminateProcess
MulDiv
GetLocaleInfoA
GetVersion
GetLastError
lstrcmpA
FreeLibrary
lstrcpynA
lstrcpyA
lstrcatA
LoadLibraryA
GetProcAddress
WriteFile
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
CreateThread
ResumeThread
GetWindowsDirectoryA
lstrlenA
GetSystemDirectoryA
OpenFile
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetUserDefaultLangID
CopyFileA
DeleteFileA
GetModuleFileNameA
Sleep
GetVersionExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
CertOpenSystemStoreA
CertCloseStore
DeleteObject
GetDeviceCaps
SetPixel
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreateSolidBrush
SetTextColor
SetBkColor
BitBlt
srand
sprintf
__CxxFrameHandler
??1type_info@@UAE@XZ
_strcmpi
_wcsicmp
_strlwr
_CxxThrowException
atoi
rand
_mbscmp
realloc
strstr
printf
asctime
localtime
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm
_ftol
_adjust_fdiv
free
malloc
atof
time
fclose
fputs
fopen
CoInitialize
CoCreateInstance
ShellExecuteA
SHDeleteKeyA
FindWindowExA
CallWindowProcA
SetWindowLongA
SetForegroundWindow
GetDlgItemTextA
MessageBoxW
MessageBoxA
GetParent
PostMessageA
IsWindow
SetWindowTextA
EndDialog
SendMessageA
GetDlgItem
ShowWindow
SetDlgItemTextA
ReleaseDC
ScreenToClient
ClientToScreen
GetCursorPos
GetDesktopWindow
GetWindowRect
SetWindowPos
IsCharAlphaNumericA
wsprintfA
EnableWindow
GetSystemMetrics
DialogBoxParamA
GetDC
GetWindowDC
FtpFindFirstFileA
InternetWriteFile
FtpCreateDirectoryA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
FtpOpenFileA
InternetFindNextFileA
InternetOpenUrlA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE