DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e78d8f555869fec45631451c61eedc3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e78d8f555869fec45631451c61eedc3.dll
Resource
win10v2004-20231215-en
Target
0e78d8f555869fec45631451c61eedc3
Size
36KB
MD5
0e78d8f555869fec45631451c61eedc3
SHA1
f135da0ac3198c4f8d758d6b8d4b3ae66b30662b
SHA256
434add9d3a7d8f56c00a9d05165a4da81238cca6e2aad920982090d53891f8f1
SHA512
32acbb6d2351a2adae3ad980201552b3b1c9bd59c41f59eb9fcc5ceffccef8a199ff5d12b73b1d7336ea8d721748b19f0cd373d68338028a7711d6964ab09351
SSDEEP
768:Zvz+DM6lPWoRKdLeoxYjvPACxcd5m5QI:l+drEFxzCxW5mB
Checks for missing Authenticode signature.
resource |
---|
0e78d8f555869fec45631451c61eedc3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
socket
htons
ioctlsocket
gethostbyname
closesocket
recv
connect
LocalFree
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
IsBadStringPtrA
WideCharToMultiByte
MultiByteToWideChar
Sleep
GetTickCount
InterlockedDecrement
CloseHandle
CreateThread
GetModuleHandleA
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CallNextHookEx
InternetCrackUrlA
CoInitializeEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
_initterm
_onexit
__dllonexit
fgets
fseek
malloc
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ