DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetVer
Install
Static task
static1
Behavioral task
behavioral1
Sample
22c77205746fe6e9e138c4a8a3db5d78.dll
Resource
win7-20231215-en
Target
22c77205746fe6e9e138c4a8a3db5d78
Size
64KB
MD5
22c77205746fe6e9e138c4a8a3db5d78
SHA1
7a0de47c4086eccd297f375f496b2f51a48d8dcf
SHA256
cdf9c5a58991c3c7c5d800c4e888ae5c60ab286f936114095c9ee6fd8cb5191e
SHA512
ef67f19d103a33dc22c9893f8859ec1450da6cadf76619a24414d55e9aac3a60528ab13fff3a13c55c16aed68081497f40fcda28600d31896bd5947820912aab
SSDEEP
768:eIBHC3KXHdQtNMqOnZKP3W2Xy6qzB7FGJjOH2dJNaT3qTcF9stmhKKFI:V9C6XHdUMqY/2CNFGJvdGT3qTQmmk8
Checks for missing Authenticode signature.
resource |
---|
22c77205746fe6e9e138c4a8a3db5d78 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LeaveCriticalSection
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
lstrcpyW
lstrcatW
DeleteFileA
WinExec
GetBinaryTypeA
GetTickCount
GetTempPathA
DeleteCriticalSection
InitializeCriticalSection
GetLocalTime
DisableThreadLibraryCalls
GetCurrentThreadId
lstrlenA
LoadLibraryW
GetProcAddress
WideCharToMultiByte
FreeLibrary
GetModuleHandleA
GetModuleFileNameA
CreateThread
Sleep
GetCurrentProcess
GetLastError
CloseHandle
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
CharNextW
GetMessageW
PostThreadMessageW
SetForegroundWindow
FindWindowA
FindWindowExA
FindWindowExW
GetClassNameA
SendMessageA
PostMessageW
CharLowerA
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegQueryValueExW
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
AdjustTokenPrivileges
ShellExecuteA
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoInitialize
LoadRegTypeLi
SysStringLen
LoadTypeLi
SysAllocString
VarUI4FromStr
VariantInit
VariantClear
SysFreeString
RegisterTypeLi
GetStateTextA
GetRoleTextA
WindowFromAccessibleObject
AccessibleObjectFromWindow
strchr
strncmp
fclose
fwrite
rename
_access
wcslen
wcscmp
_initterm
_adjust_fdiv
_stricmp
memcmp
realloc
malloc
calloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
atoi
strcat
swprintf
getchar
wprintf
strcmp
_splitpath
fopen
fgets
strstr
memcpy
strcpy
sprintf
strlen
memset
connect
htons
closesocket
socket
recv
gethostbyname
WSAStartup
inet_addr
send
Netbios
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetVer
Install
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ