DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1cecdd87af5ba8921fa6854c0e02159d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cecdd87af5ba8921fa6854c0e02159d.dll
Resource
win10v2004-20231215-en
Target
1cecdd87af5ba8921fa6854c0e02159d
Size
32KB
MD5
1cecdd87af5ba8921fa6854c0e02159d
SHA1
2eace2ceb9adbe15d168cff49f7e36cc51f0e6b4
SHA256
7de78c8f20edae0bc724f4957557c2cb26445279d1a2af74d6f498fc3fa43804
SHA512
7c69df9a852c305c4c81f3864778e1bd529ac22eb0594e79cccb2c42c4cfcdee32eee52989220bedc04813d8272a724c5489a0ebeeb243ecd6cf3929648da84f
SSDEEP
384:OaslDWhkjiJs7vmqAIYL8suBBQARQk5LOVPHnvhzpH4t2Gb:Oasqk2Js72IvLBBQARQkdof12z
Checks for missing Authenticode signature.
resource |
---|
1cecdd87af5ba8921fa6854c0e02159d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
lstrlenA
ExitProcess
InitializeCriticalSection
GetModuleHandleA
WritePrivateProfileStringA
GetTempPathA
GetPrivateProfileStringA
GetCurrentDirectoryA
lstrcatA
VirtualAlloc
LoadLibraryA
VirtualProtect
DisableThreadLibraryCalls
GetCurrentProcess
TerminateProcess
CreateEventA
CreateThread
OpenEventA
SetEvent
CloseHandle
Sleep
GetModuleFileNameA
IsBadReadPtr
WinExec
wsprintfA
SetTimer
SetWindowsHookExA
CallNextHookEx
RegSetValueExA
RegOpenKeyA
RegCloseKey
SysStringLen
LoadRegTypeLi
SysFreeString
ord15
ord16
ord21
ord18
ord57
ord32
ord58
ord30
ord23
malloc
_adjust_fdiv
_strlwr
_strcmpi
_itoa
_initterm
strcpy
strcat
memset
strrchr
memcpy
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
strlen
exit
strcmp
free
InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ