DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
04d1c6176f328fb68c5566409fd16acb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04d1c6176f328fb68c5566409fd16acb.dll
Resource
win10v2004-20231215-en
Target
04d1c6176f328fb68c5566409fd16acb
Size
140KB
MD5
04d1c6176f328fb68c5566409fd16acb
SHA1
c46c7a5809be8fad65d0b7ef931f39808bf5feed
SHA256
f7f3e43eef4b4c68381a84c0c17e7faa234b081f489d538bb60c4fef656fb19c
SHA512
dc68f0e7cd7cccdec1695a113100b976cf5377bfeda036c8a1068ba96b6f859ab9c03339d05f9e59a3654f9ac4ffbd2627a5682cea418269900a659bb665214c
SSDEEP
1536:oC0cHoTd1Tu3tetxIGuwa6bGZcE0+drvPGYsJcPLVm/1oTEIAXQghQ3ICS4AWyp4:oGk/Tdo2+R3sqTEIAg5kUQMgcJkHFy
Checks for missing Authenticode signature.
resource |
---|
04d1c6176f328fb68c5566409fd16acb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
Netbios
GetClassNameA
DefWindowProcA
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
EnumWindows
EnumChildWindows
GetWindowThreadProcessId
CloseClipboard
OpenClipboard
wsprintfA
SetWindowPos
SystemParametersInfoA
atoi
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
tmpnam
fopen
fwrite
fclose
srand
isalnum
isspace
__mb_cur_max
wctomb
isxdigit
strtok
toupper
malloc
free
printf
isupper
strerror
wcscmp
?what@exception@@UBEPBDXZ
wcslen
ispunct
islower
??1exception@@UAE@XZ
??0exception@@QAE@XZ
strncpy
strchr
_CxxThrowException
??0exception@@QAE@ABV0@@Z
isalpha
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
isgraph
tolower
_stricmp
strstr
UuidToStringA
timeGetTime
GetFileVersionInfoSizeA
GetFileVersionInfoA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid
RegCloseKey
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
SHSetValueA
SHGetValueA
StrStrIA
DeleteFileA
CreateProcessA
WaitForSingleObject
MoveFileExA
VirtualAllocEx
QueryPerformanceFrequency
CreateRemoteThread
lstrcmpA
lstrcmpiA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetProcAddress
GetLastError
LoadLibraryA
SetLastError
OpenProcess
GetCurrentProcessId
GetThreadTimes
GetCurrentThread
HeapFree
GetCurrentDirectoryA
GetVersion
GetProcessHeap
GetVersionExA
WriteProcessMemory
FreeLibrary
lstrlenA
GetFullPathNameA
LocalFree
FormatMessageA
HeapSize
HeapAlloc
GetTickCount
GetLocalTime
Sleep
CloseHandle
GetSystemInfo
GetEnvironmentVariableA
InterlockedExchange
GetSystemDirectoryA
GetModuleFileNameA
lstrcpynA
QueryPerformanceCounter
GetProcessTimes
GetCurrentProcess
GetWindowsDirectoryA
lstrcpyA
MultiByteToWideChar
SleepEx
CreateFileA
GetModuleHandleA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ