DllRegisterServer
DllUnregisterServer
KFtCiMStYcIC
KNnmWFFzQLd
Static task
static1
Behavioral task
behavioral1
Sample
2170a3becd002b173d1f667696d23248.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2170a3becd002b173d1f667696d23248.dll
Resource
win10v2004-20231215-en
Target
2170a3becd002b173d1f667696d23248
Size
32KB
MD5
2170a3becd002b173d1f667696d23248
SHA1
ad79d766ebf6b59fc539a0e3ada6c5ef3be9e30c
SHA256
db91b02e825a33e0590e1cae76fa5fd7dfce0529b9f318d57085c70bbb9ec0aa
SHA512
e2a587edabca1748e99dd0aab11d8652aca596fbdc070d7f479fa22b01cfe6a3a36cc3a93f191bd25cedb7ad3403052121dec919da328b900172e3b83e66dba4
SSDEEP
384:3BSnf+LsHnwohRg0chjExpgW/zSpUJ4AbaDkIl:xSmLsHwgRg0chjExpgW/zSpUJ4AbaY8
Checks for missing Authenticode signature.
resource |
---|
2170a3becd002b173d1f667696d23248 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLocalTime
DeleteFileA
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedIncrement
GetModuleFileNameA
CloseHandle
UnhookWindowsHookEx
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowExA
SetTimer
KillTimer
PostMessageA
DefWindowProcA
CallNextHookEx
RegisterClassExA
CreateWindowExA
ShowWindow
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
_initterm
free
__CxxFrameHandler
strchr
fopen
fwrite
fclose
_strlwr
malloc
_adjust_fdiv
_stricmp
??2@YAPAXI@Z
strrchr
_access
sprintf
strstr
??3@YAXPAX@Z
DllRegisterServer
DllUnregisterServer
KFtCiMStYcIC
KNnmWFFzQLd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ