DllCanUnloadNowW
DllRegisterServerW
DllShowWinDlg
DllUnregisterServerW
SmartStart
Static task
static1
Behavioral task
behavioral1
Sample
0698a1ffec2b6d8e68f08f1aca760245.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0698a1ffec2b6d8e68f08f1aca760245.dll
Resource
win10v2004-20231215-en
Target
0698a1ffec2b6d8e68f08f1aca760245
Size
33KB
MD5
0698a1ffec2b6d8e68f08f1aca760245
SHA1
b20a3010f5b6aeead5f376ce3fb4dbce7cb41ce8
SHA256
863c731b0d2f0535064b91e056c4321838431dd7092aa99602eff37f31b90dcc
SHA512
0cc81c408062d62ce4f629739d34d3978f60fd6c6ae449f26b06bd0ff71c66a1a366f73ec89f39adc77b865c941e4d4433a5d018a4bb4ec97e012c83faada615
SSDEEP
384:6OzsAHPyKmeQ0fOMIbHfuYeNGm+V9fZAjEuTjKJ1oXkpzvla/4b:6OP3xQ4OjuY2EBZAjEujKJ1oXktvl
Checks for missing Authenticode signature.
resource |
---|
0698a1ffec2b6d8e68f08f1aca760245 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateNamedPipeA
CreateEventA
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
DeleteFileA
WriteFile
CreateFileA
ReadFile
CreateThread
ConnectNamedPipe
GetCurrentProcess
GetStartupInfoA
WinExec
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
TerminateThread
CloseHandle
Sleep
HeapFree
DisconnectNamedPipe
SetEvent
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetStdHandle
wsprintfA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CreateProcessAsUserA
URLDownloadToFileA
InternetConnectA
HttpQueryInfoA
InternetReadFile
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
DllCanUnloadNowW
DllRegisterServerW
DllShowWinDlg
DllUnregisterServerW
SmartStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ