DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
24b7c6a8d3c82dc22f4188dca0b91ef9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24b7c6a8d3c82dc22f4188dca0b91ef9.dll
Resource
win10v2004-20231215-en
Target
24b7c6a8d3c82dc22f4188dca0b91ef9
Size
168KB
MD5
24b7c6a8d3c82dc22f4188dca0b91ef9
SHA1
745387d98cd40bfd22c78f1102593c52c07f8c15
SHA256
3c2ba2f03f2801a2c2ecfa85f4e603c20fc0d18ba832174dfbabf71a268aa979
SHA512
2081e17dad37958a7dde06ad8a9e5f7cae326d392fcc20fc16f181ef637603ea13da66ef4b2dda73073304b55a0c83ca31a5290b10bf99fec568995a3e089d0c
SSDEEP
3072:KVdRym0ge7RJyR1GxMYVf7B8AeKJf1x4c2ZsawJ0:idNg7SRExJx7+AeM1xistJ
Checks for missing Authenticode signature.
resource |
---|
24b7c6a8d3c82dc22f4188dca0b91ef9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
srand
strtol
atoi
tmpnam
fopen
fwrite
fclose
strstr
strtok
toupper
free
?what@exception@@UBEPBDXZ
islower
wcslen
wcscmp
isupper
__mb_cur_max
malloc
wctomb
isgraph
tolower
isalnum
isspace
isalpha
isxdigit
printf
??1exception@@UAE@XZ
strncpy
strchr
_CxxThrowException
__CxxFrameHandler
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
strerror
??2@YAPAXI@Z
??3@YAXPAX@Z
ispunct
GetErrorInfo
SysFreeString
SysAllocString
VariantClear
GetMessageA
TranslateMessage
DispatchMessageA
OpenClipboard
wsprintfA
ShowWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
SystemParametersInfoA
SetWindowPos
SetTimer
KillTimer
CloseClipboard
timeGetTime
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoTaskMemFree
CoCreateGuid
RegOpenKeyExA
SetEntriesInAclA
GetSecurityInfo
RegCloseKey
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
GetFileVersionInfoSizeA
GetFileVersionInfoA
Netbios
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
InternetOpenA
InternetSetOptionA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetOpenUrlA
SHSetValueA
StrStrIA
SHGetValueA
UuidToStringA
HeapFree
GetModuleFileNameA
GetModuleHandleA
GetVersion
FreeLibrary
GetCurrentProcessId
GetLastError
LoadLibraryA
SetLastError
lstrlenA
GetFullPathNameA
LocalFree
OpenProcess
Sleep
GetCurrentProcess
GetProcessTimes
CloseHandle
GetTickCount
QueryPerformanceCounter
GetProcAddress
FormatMessageA
HeapSize
HeapAlloc
GetProcessHeap
GetVersionExA
GetCurrentDirectoryA
GetThreadTimes
GetCurrentThread
GetSystemDirectoryA
GetWindowsDirectoryA
MultiByteToWideChar
GetSystemInfo
lstrcpyA
FreeEnvironmentStringsA
GetEnvironmentStrings
lstrcpynA
lstrcmpiA
lstrcmpA
GetLocalTime
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
DeleteFileA
CreateProcessA
WaitForSingleObject
MoveFileExA
CreateFileA
SleepEx
QueryPerformanceFrequency
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ