DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1a10996f25f1b6b01173bd5c4ba36d63.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a10996f25f1b6b01173bd5c4ba36d63.dll
Resource
win10v2004-20231215-en
Target
1a10996f25f1b6b01173bd5c4ba36d63
Size
44KB
MD5
1a10996f25f1b6b01173bd5c4ba36d63
SHA1
5aaaf72cd62e2f013c6acf9b9d51d85334b91876
SHA256
77f5e956e7635d5cab495980b03d0c0030316ac78386bc9c2f061adf5e3e2d75
SHA512
e05a31920252f1b17fa652e68ef0370b2258d23420d543342f0ad3a5a1f6c4f4b951a848a0be003b24dbcfe9e98715a4ecf72def369535a8b0673401d8b82b84
SSDEEP
384:tzR0tkFBijDSDtkav5p/wcKKi8Yt8IbbKHN94/NGWjb1TNAj4JpJgLa0Mp:xWKpkav0cHi8fJNdONNA0gLa1
Checks for missing Authenticode signature.
resource |
---|
1a10996f25f1b6b01173bd5c4ba36d63 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
CreateThread
LoadLibraryA
GetProcAddress
VirtualAlloc
InterlockedIncrement
CreateProcessA
CloseHandle
GetLocalTime
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
GetModuleFileNameA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA
FindWindowExA
SetWindowsHookExA
CreateWindowExA
ShowWindow
CallNextHookEx
KillTimer
SetTimer
UnhookWindowsHookEx
PostMessageA
DefWindowProcA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
free
strrchr
_except_handler3
atoi
??2@YAPAXI@Z
_stricmp
strchr
fopen
sprintf
__CxxFrameHandler
fclose
fwrite
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ