DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1fe7d4ecba904359b83e1c7ec6e0b13b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fe7d4ecba904359b83e1c7ec6e0b13b.dll
Resource
win10v2004-20231215-en
Target
1fe7d4ecba904359b83e1c7ec6e0b13b
Size
51KB
MD5
1fe7d4ecba904359b83e1c7ec6e0b13b
SHA1
21d4c2a573125e58876e133c231f1eb188cc01a9
SHA256
53c48f4184bce263c16369cb5fca95887ec086b8be7c7a5f5196cb5207732711
SHA512
cc5cba5e007dd5a76eecb8391274f4e1e111d367b54dff457cfd7525f1a44744b19651e22e7a9bb7e9840eb2b06a101ad05e90082611b9e16d7914786d748180
SSDEEP
1536:VS5wOs60ImnU5GaaKivo588RxTgcHdjt:Y5Ss8aG7A588ngc9j
Checks for missing Authenticode signature.
resource |
---|
1fe7d4ecba904359b83e1c7ec6e0b13b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htons
connect
closesocket
send
ioctlsocket
gethostbyname
recv
socket
WSAStartup
LocalFree
GetModuleHandleA
IsBadStringPtrA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
IsBadReadPtr
VirtualQuery
GetSystemInfo
WideCharToMultiByte
GetTickCount
InterlockedDecrement
CreateThread
CloseHandle
GetCommandLineA
GetModuleFileNameA
GetCurrentProcess
CreateFileA
lstrcpynA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DisableThreadLibraryCalls
FlushInstructionCache
wsprintfA
PeekMessageA
GetForegroundWindow
GetClassNameA
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
free
isalpha
isdigit
realloc
malloc
atoi
wcslen
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ