DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
26ccd197fe4b1035861da4a327fc17f5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26ccd197fe4b1035861da4a327fc17f5.dll
Resource
win10v2004-20231215-en
Target
26ccd197fe4b1035861da4a327fc17f5
Size
48KB
MD5
26ccd197fe4b1035861da4a327fc17f5
SHA1
7e71d051930eab52bcbb8c9139343f9d8347523f
SHA256
fad68457176111ca7ebcdcd591d962a5af21707e2f3ac1d128224e2df8e1e50a
SHA512
7a99c4de810be4f066850c39c496d41e75b846b333cb96aa8c395d33fa20a270c48e5e7b69edb6fd041fcfbd7c8f1cd6a8463b76f87b7cd71169768b47fc1823
SSDEEP
768:PgfkWHBMJcGrhpkavWFWwMIgLa1fd8bBp:V/cbVFWHJLa4bBp
Checks for missing Authenticode signature.
resource |
---|
26ccd197fe4b1035861da4a327fc17f5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
GetModuleFileNameA
CreateThread
VirtualAlloc
GetLocalTime
LoadLibraryA
GetLastError
CreateMutexA
GetProcAddress
CloseHandle
WinExec
GetSystemDirectoryA
GetWindowsDirectoryA
InterlockedIncrement
SetTimer
DefWindowProcA
CallNextHookEx
CreateWindowExA
ShowWindow
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
FindWindowExA
PostMessageA
UnhookWindowsHookEx
KillTimer
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
strrchr
__CxxFrameHandler
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
strchr
sprintf
_initterm
malloc
_adjust_fdiv
fclose
fwrite
fopen
SHGetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ