DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1d0e2423f1233523ad64027a820c3f89.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d0e2423f1233523ad64027a820c3f89.dll
Resource
win10v2004-20231215-en
Target
1d0e2423f1233523ad64027a820c3f89
Size
52KB
MD5
1d0e2423f1233523ad64027a820c3f89
SHA1
8cefe55164b9e0a8a7a85955e9af5c2e6393313d
SHA256
25212f4439acbbacf8e636201d53b1e736bfc86b0cf8773bfe885456ade35664
SHA512
a762ace989d2f902b3dcdf57f69c43314ca2d9f13d1675a5c1e780911059e8c84a470dc6fb85549b2d0ab957b48d4306abc8eca3d6268e4f6eade4be24b9b64d
SSDEEP
1536:0yjLuC0+LIdPRzOdTUVMa3O8c/8ztcoH:0yu+IdPRadYVM/OcoH
Checks for missing Authenticode signature.
resource |
---|
1d0e2423f1233523ad64027a820c3f89 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
CreateThread
GetCommandLineW
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
lstrlenA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
RemoveDirectoryA
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
CreateDirectoryA
Process32First
Process32Next
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
CloseHandle
Sleep
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetCurrentProcessId
LocalFree
WritePrivateProfileStringA
LoadLibraryA
ExitProcess
FreeLibrary
DisableThreadLibraryCalls
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
atoi
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcmp
_wcslwr
wcsstr
fopen
fseek
ftell
fread
fclose
memcmp
sprintf
strstr
??3@YAXPAX@Z
memset
strlen
strcat
strcpy
strncpy
strchr
strncmp
_strupr
strrchr
_access
memcpy
_purecall
??2@YAPAXI@Z
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ