DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRunThreads
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0986f27963a7000555cd447bdb026964.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0986f27963a7000555cd447bdb026964.dll
Resource
win10v2004-20231215-en
Target
0986f27963a7000555cd447bdb026964
Size
296KB
MD5
0986f27963a7000555cd447bdb026964
SHA1
a1780b6d0f941de871b903038fc302a9df69114c
SHA256
14e1006b14598e4255f4ac171a47b85fe21dfd2f72947e103847ff73a5f24aa8
SHA512
22903b5c433dbb39ad9ff3bd8e65bbc3115b2dd56bf342930eaed4b385eab708e68676865af24cfc152ff220389fa5d15bdd2c1608766f9f80bcfc015b8658b5
SSDEEP
3072:yEplvQsAuris9YFwDoNGu12xApAQTbcq8Ke7oCtH80qnGzc/hKnNtGAdYYquL5p:llImrUoock/TT8I4cStnGAykp
Checks for missing Authenticode signature.
resource |
---|
0986f27963a7000555cd447bdb026964 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WinHttpSetDefaultProxyConfiguration
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpCrackUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
GlobalFree
GetLastError
Sleep
GetWindowsDirectoryW
DeleteFileW
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryW
OpenProcess
lstrlenA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiW
GetModuleFileNameW
FindClose
FindNextFileW
FindFirstFileW
CreateDirectoryW
WaitForMultipleObjects
FindFirstChangeNotificationW
CreateEventW
InterlockedIncrement
InterlockedDecrement
LoadLibraryExW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
CreateThread
GetModuleHandleExW
SizeofResource
WaitForSingleObject
SetFilePointer
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesW
GetCurrentDirectoryW
SetFileTime
FileTimeToSystemTime
GetFileSize
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingW
GetLocalTime
UnmapViewOfFile
GetTickCount
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetConsoleMode
lstrlenW
WriteFile
WideCharToMultiByte
SetEnvironmentVariableA
CreateFileW
ReadFile
CloseHandle
GetExitCodeProcess
CreateProcessA
GetFileAttributesA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
DisableThreadLibraryCalls
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetOEMCP
GetCPInfo
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
VirtualAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
CharNextW
wsprintfW
UnregisterClassA
GetDesktopWindow
CloseServiceHandle
RegEnumKeyExW
GetUserNameW
RegEnumValueW
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegSaveKeyW
CreateServiceW
OpenSCManagerW
OpenServiceW
StartServiceW
RegCreateKeyW
RegRestoreKeyW
RegCloseKey
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
VarUI4FromStr
SysFreeString
SysAllocString
LoadTypeLi
LoadRegTypeLi
DispCallFunc
VariantClear
VariantInit
RegisterTypeLi
SysStringLen
SHRegCreateUSKeyW
SHDeleteKeyW
SHRegSetUSValueW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRunThreads
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ