DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
27949c705d19f5024bb9e8425c153390.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
27949c705d19f5024bb9e8425c153390.dll
Resource
win10v2004-20231215-en
Target
27949c705d19f5024bb9e8425c153390
Size
44KB
MD5
27949c705d19f5024bb9e8425c153390
SHA1
33ec986c9cea23a82c570442b73b3feee8f527b6
SHA256
cb730436e0fad5009e11f7c4867d01f88dddf47f5ae25946bedf2655332d435a
SHA512
895a7e5fe827bedef107cfa0f4e0b87e338f250b436746f105487682bc734df216e628805d5c7464cb5993a7d8a3fd17256db80ef1b489d48b74c67bb0bc8c14
SSDEEP
768:fU1WiOkZ5LKwZpYkm/IDMQ4FWWq35CfXPzL9P6RspksLjDDk2Z7z4GQBaCZ:fOLJoHzGOTjDk2ZX4G4p
Checks for missing Authenticode signature.
resource |
---|
27949c705d19f5024bb9e8425c153390 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
fopen
_initterm
exit
atoi
fgets
strtok
strstr
strchr
strcat
tolower
memcpy
malloc
strlen
strcpy
strcmp
memcmp
free
??2@YAPAXI@Z
_purecall
memset
realloc
??3@YAXPAX@Z
wcstombs
GetTempPathA
FreeLibrary
SizeofResource
WriteFile
CloseHandle
CreateFileA
FindClose
FindFirstFileA
TerminateProcess
Sleep
OpenProcess
GetFileAttributesA
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleFileNameA
WideCharToMultiByte
HeapDestroy
CreateDirectoryA
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
lstrcatA
GetProcAddress
LoadLibraryA
lstrcpyA
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
ShowWindow
EnumThreadWindows
BringWindowToTop
MessageBoxA
EnumWindows
IsWindow
GetWindowThreadProcessId
wsprintfA
SetTimer
KillTimer
PostMessageA
TranslateMessage
DispatchMessageA
CharNextA
GetWindowLongA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
SetWindowLongA
GetWindowTextA
GetDlgItem
SendDlgItemMessageA
GetParent
EndDialog
GetActiveWindow
DialogBoxParamA
EnableWindow
SetWindowTextA
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
VariantClear
VarUI4FromStr
SysAllocString
SysFreeString
RegisterTypeLi
LoadRegTypeLi
SysAllocStringLen
LoadTypeLi
SysStringLen
RegDeleteKeyA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RasEnumConnectionsA
RasSetEntryPropertiesA
RasGetConnectStatusA
RasEnumDevicesA
RasDialA
RasEnumEntriesA
RasGetEntryDialParamsA
RasSetEntryDialParamsA
RasHangUpA
RasGetEntryPropertiesA
RasGetErrorStringA
RasEditPhonebookEntryA
HlinkNavigateString
InternetOpenUrlA
InternetOpenA
InternetQueryOptionA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetGetConnectedState
SHGetPathFromIDListA
SHGetSpecialFolderLocation
StrToIntA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ