DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1e524a36bef7ebb7d5ed5aa67c8b5566.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e524a36bef7ebb7d5ed5aa67c8b5566.dll
Resource
win10v2004-20231215-en
Target
1e524a36bef7ebb7d5ed5aa67c8b5566
Size
355KB
MD5
1e524a36bef7ebb7d5ed5aa67c8b5566
SHA1
03d1bcb1c134d68b0898c8fa3af9a0a3bbbc62de
SHA256
84ffa4aa0a7009d9327a49952d03bee44a42f556e686624155c38421d8b69e32
SHA512
dc874c1dbfadd2c25300e6bb22ae66056234635e54709f17157f8450f3699801970f40df8bfa061173ac74b742234ebbe1d94501e48f0b8ee4fdc2bf203a7910
SSDEEP
1536:rT1JsLbqBEOPSl5b7X3FrmUB+UM666666666666666666666666666666666666a:38LbqWqSl5b7X3FZp
Checks for missing Authenticode signature.
resource |
---|
1e524a36bef7ebb7d5ed5aa67c8b5566 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrW
PathCombineW
PathFindFileNameW
StrCmpW
StrCmpIW
StrCatW
LoadLibraryExA
CreateThread
GetProcessHeap
CloseHandle
lstrcatA
lstrcpyA
InitializeCriticalSection
GetBinaryTypeW
GetLastError
lstrcpynA
GetProcAddress
FreeLibrary
LoadLibraryA
WideCharToMultiByte
GetModuleFileNameA
MultiByteToWideChar
GetTimeFormatA
GetDateFormatA
lstrcmpA
lstrcmpiA
GetModuleHandleW
PulseEvent
CreateEventA
GetCurrentThreadId
GetTickCount
CreateFileMappingW
CreateFileW
SetFilePointerEx
DeleteFileW
SetFileAttributesW
GetTempFileNameW
GetTempPathW
WriteFile
ReadFile
LeaveCriticalSection
EnterCriticalSection
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
CreateMutexA
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileInformationByHandle
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameW
WaitForSingleObject
Sleep
ExitThread
ResetEvent
lstrcpyW
TranslateMessage
GetMessageW
SetWindowsHookExW
DispatchMessageW
DestroyWindow
GetSystemMetrics
wsprintfA
wsprintfW
RegisterClassExW
CreateWindowExW
GetWindowRect
SetTimer
GetClassNameA
GetWindow
SendMessageW
GetWindowTextA
CallNextHookEx
GetClientRect
DefWindowProcW
ShowWindow
SHGetSpecialFolderPathW
SysFreeString
SysAllocStringLen
VariantInit
SysAllocString
SysAllocStringByteLen
VariantClear
VariantCopy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ