DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
00f3a2c992df22b2527f321806a0a0ca.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00f3a2c992df22b2527f321806a0a0ca.dll
Resource
win10v2004-20231215-en
Target
00f3a2c992df22b2527f321806a0a0ca
Size
136KB
MD5
00f3a2c992df22b2527f321806a0a0ca
SHA1
4c4e5756f758b904a664a853d8be2b311df637b9
SHA256
6e50204e2feb28086962131eb988d39536f045a4e705322ce82d0a09a857c59b
SHA512
aca2b38821eaa7ce5d1dc736eb5fec5c8e7dd226b555bc4aff200d92996000391d668f20b5ca974ec81bc2640dc8133a3d291f6f57ee682bf9996b09891094a3
SSDEEP
3072:MPZGTSyJQvp6q+t/0NTNzRfsT6JflVr3Y:MP0SRt+t/SBFlVro
Checks for missing Authenticode signature.
resource |
---|
00f3a2c992df22b2527f321806a0a0ca |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
UuidToStringA
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
RegCloseKey
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
Netbios
wsprintfA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
SystemParametersInfoA
SetWindowPos
KillTimer
SetTimer
DefWindowProcA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
OpenClipboard
CloseClipboard
GetFileVersionInfoSizeA
GetFileVersionInfoA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
StrStrIA
SHSetValueA
SHGetValueA
free
toupper
tolower
strtok
strchr
strncpy
printf
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??0exception@@QAE@XZ
??1exception@@UAE@XZ
wcslen
?what@exception@@UBEPBDXZ
wcscmp
strstr
srand
wctomb
__mb_cur_max
strerror
_stricmp
fclose
fwrite
fopen
tmpnam
atoi
isupper
ispunct
isgraph
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
isspace
islower
isalnum
malloc
isalpha
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
isxdigit
timeGetTime
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid
CoInitialize
CoTaskMemFree
GetCurrentProcessId
lstrcpynA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
QueryPerformanceCounter
GetCurrentThread
GetThreadTimes
GetSystemInfo
GetCurrentProcess
GetProcessTimes
GetLocalTime
LoadLibraryA
VirtualAllocEx
GetProcAddress
WriteProcessMemory
CreateRemoteThread
FreeLibrary
OpenProcess
lstrcpyA
InterlockedExchange
FormatMessageA
LocalFree
GetModuleHandleA
GetModuleFileNameA
GetCurrentDirectoryA
GetEnvironmentVariableA
GetSystemDirectoryA
GetWindowsDirectoryA
SleepEx
GetFullPathNameA
lstrlenA
SetLastError
GetLastError
GetVersion
MultiByteToWideChar
CreateFileA
CloseHandle
lstrcmpA
lstrcmpiA
GetProcessHeap
QueryPerformanceFrequency
GetTickCount
Sleep
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
GetVersionExA
HeapSize
HeapAlloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ