DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0dd8bf1a12b1bfff1caa2d01298f8307.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dd8bf1a12b1bfff1caa2d01298f8307.dll
Resource
win10v2004-20231222-en
Target
0dd8bf1a12b1bfff1caa2d01298f8307
Size
40KB
MD5
0dd8bf1a12b1bfff1caa2d01298f8307
SHA1
5528abe28b94db7fd81fa02f508ab46669d24df1
SHA256
8684ad6970f7f1dacf4d5796eff83e534b264c4f34f7da2e8e5ca53981e5f39f
SHA512
cf22db254ae92636579d0fe39700a51df978bf710b0170c2e9f469807ee6dd360d761a62a9edad628514428c91cd0446d4f223ef71c8dac9bd16a7db62f8f590
SSDEEP
384:YxG71s7Dtkav5ttNOVsHpMppaUiMQs92+4MU8gIXQuChkw9o9a1hJpJgLa0MpYW:gpkavPtLcksQso+4/+ao9axgLa1
Checks for missing Authenticode signature.
resource |
---|
0dd8bf1a12b1bfff1caa2d01298f8307 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateProcessA
GetSystemDirectoryA
WinExec
GetWindowsDirectoryA
CreateThread
GetLocalTime
CreateMutexA
GetLastError
CloseHandle
InterlockedIncrement
GetMessageA
UnhookWindowsHookEx
RegisterClassExA
PostMessageA
TranslateMessage
SetTimer
CallNextHookEx
DefWindowProcA
CreateWindowExA
ShowWindow
SetWindowsHookExA
KillTimer
DispatchMessageA
FindWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
strrchr
_adjust_fdiv
malloc
_initterm
free
strchr
fopen
fwrite
fclose
_stricmp
_except_handler3
__CxxFrameHandler
atoi
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ