DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0018cb6e4ecc5be2323af05bfcfc8ebb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0018cb6e4ecc5be2323af05bfcfc8ebb.dll
Resource
win10v2004-20231215-en
Target
0018cb6e4ecc5be2323af05bfcfc8ebb
Size
48KB
MD5
0018cb6e4ecc5be2323af05bfcfc8ebb
SHA1
d8b8b63bc9d6be96661bdd8027a77dbdd8c916d5
SHA256
ba092664fd219de759191844b2c6c90b99aba83083b2e2cb6483be34877aa151
SHA512
07dcb101906cc121784c99c18206b95b6a7406c8207ee847f5a5227d09ace3547baa99e932c25b5c0394c2b70ca67d855b33dbc7303ce26a07c2fdc53cfd4361
SSDEEP
768:+wNOKAb4XUtZpkavLGmJeJO23azZ3IAw8gLa160G:+NK+4ktwoG4SGYT9LaY
Checks for missing Authenticode signature.
resource |
---|
0018cb6e4ecc5be2323af05bfcfc8ebb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
GetLocalTime
GetProcAddress
GetLastError
CreateMutexA
CreateProcessA
GetWindowsDirectoryA
VirtualAlloc
LoadLibraryA
CreateThread
GetModuleFileNameA
CloseHandle
InterlockedIncrement
WinExec
UnhookWindowsHookEx
ShowWindow
SetWindowsHookExA
KillTimer
SetTimer
FindWindowExA
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CallNextHookEx
CreateWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
free
_except_handler3
strchr
fopen
fwrite
fclose
_stricmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv
strrchr
__CxxFrameHandler
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ