DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1687ed94ddc0e696c7f57fbd80681ce1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1687ed94ddc0e696c7f57fbd80681ce1.dll
Resource
win10v2004-20231215-en
Target
1687ed94ddc0e696c7f57fbd80681ce1
Size
48KB
MD5
1687ed94ddc0e696c7f57fbd80681ce1
SHA1
246ed55939fc9f323e99538aae2b6d2826620c3b
SHA256
b0eae7f1241986fe7817ba344975b7ccb23a4f9894681bad1250858d41e14b66
SHA512
cd808a5b1fd8d8ffda56763a7e9dd67f022b7377e2d0f7f0433ea31cb0820e7c47c4b9837f71ab5b6f38c60fae506e598d9aaf8ab2a9bdb7d9bc0fb14d852b75
SSDEEP
768:HMQzF1S85L7j+VZSpkavfQhYwDgLa111:sQZc85L7gkmF8La31
Checks for missing Authenticode signature.
resource |
---|
1687ed94ddc0e696c7f57fbd80681ce1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
WinExec
CreateThread
GetSystemDirectoryA
CreateProcessA
GetLocalTime
VirtualAlloc
InterlockedIncrement
GetModuleFileNameA
CloseHandle
CreateMutexA
GetLastError
GetWindowsDirectoryA
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
SetWindowsHookExA
GetMessageA
ShowWindow
UnhookWindowsHookEx
RegisterClassExA
CallNextHookEx
FindWindowExA
PostMessageA
CreateWindowExA
TranslateMessage
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
_except_handler3
strchr
fopen
fwrite
fclose
_stricmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv
strrchr
sprintf
__CxxFrameHandler
SHGetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ