DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
20c29dc72bb1267cb4a2425e4a069b39.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20c29dc72bb1267cb4a2425e4a069b39.dll
Resource
win10v2004-20231215-en
Target
20c29dc72bb1267cb4a2425e4a069b39
Size
44KB
MD5
20c29dc72bb1267cb4a2425e4a069b39
SHA1
4ab265099e2da7105a0f45046e92192d31b9321c
SHA256
615b2563fc8044576ae68b5a8083e21af6b26f9dc1a8596c5efaa0c56f946ab0
SHA512
6f9838b5f527a4796d7195f164d013d15da2e45d73f9ffb8fe413080590b4ba96d502b40d9a186335589f229ae9356d685a4e37726d7a67d506967a6743406db
SSDEEP
768:RRQH+4AseIcI6RxcwUpkavKkAGiy8fZJi7YWsDXAjzgLa1U+eyr:fQe4AsdcoE/NGlH7YW+XAALaOXy
Checks for missing Authenticode signature.
resource |
---|
20c29dc72bb1267cb4a2425e4a069b39 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedIncrement
GetLocalTime
CreateMutexA
CreateProcessA
VirtualAlloc
CreateThread
GetProcAddress
CloseHandle
LoadLibraryA
GetLastError
RegisterClassExA
UnhookWindowsHookEx
SetTimer
DefWindowProcA
CallNextHookEx
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowExA
PostMessageA
SetWindowsHookExA
KillTimer
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
strrchr
strchr
fopen
fwrite
_stricmp
fclose
__CxxFrameHandler
_except_handler3
_initterm
malloc
_adjust_fdiv
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ