DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Dll_JustWorking
Start
Static task
static1
Behavioral task
behavioral1
Sample
1dc398fb61329b13ae5ebbf036edfd6a.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1dc398fb61329b13ae5ebbf036edfd6a.dll
Resource
win10v2004-20231215-en
Target
1dc398fb61329b13ae5ebbf036edfd6a
Size
1.1MB
MD5
1dc398fb61329b13ae5ebbf036edfd6a
SHA1
226640b02b18be063708a005514d455aeeaf8077
SHA256
3a9c6efd052519efd5d79c9064b8c46e70e8ff8d43b6d492ce22543548c8aa62
SHA512
42f6b5871f51ac833d0b6ccdc05c22226e9d272ebc9041ee8ee2c050b78d14e7693852d54ad7869567ff5c35e8c97aa1e34c22db4b6dce2eb9141208da607078
SSDEEP
384:+qXaTyjCQdKgmcvLzUrWzSBXc+w76NtJB3JaHJf:+TT3ngPorWmlc/7CtJB5a
Checks for missing Authenticode signature.
resource |
---|
1dc398fb61329b13ae5ebbf036edfd6a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
timeGetTime
InternetConnectA
InternetCloseHandle
FtpGetFileA
InternetGetConnectedState
InternetOpenA
ord665
ord354
ord6385
ord6010
ord5186
ord5442
ord1979
_stricmp
rand
strrchr
sprintf
srand
strlen
strcat
__CxxFrameHandler
memset
strcpy
_adjust_fdiv
malloc
_initterm
free
_onexit
strcmp
time
__dllonexit
FreeLibrary
Sleep
GetWindowsDirectoryA
DeleteFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
VirtualAllocEx
WriteProcessMemory
LoadLibraryA
GetProcAddress
CreateRemoteThread
GetLastError
GetCurrentProcess
GetCommandLineA
CloseHandle
KillTimer
SetTimer
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
ShellExecuteA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Dll_JustWorking
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ