DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2b09ba85e388ccbeaab7c40f64cc2a56.dll
Resource
win7-20231129-en
Target
2b09ba85e388ccbeaab7c40f64cc2a56
Size
108KB
MD5
2b09ba85e388ccbeaab7c40f64cc2a56
SHA1
e126f6e5485d89d1ed1cd3f767a8687cb4f3ecc5
SHA256
365ec70091b919905116d6c9635882ae724a78da165ec0f38e77fb34a5dc593d
SHA512
9087e73889bf0c4ba8284a625c6d28849417934a91d1761c91289238e5410a1b48a4db5260705d932259e79339f73fa42000ddfaf513b592de877a7e84de8b0a
SSDEEP
1536:w4MZnj/8pKQfhCqeFNsQg7VEWZDXlX0Q8kFHwgBJKi5mGR4TP4oBuO3BTXwVts0r:wj/8AshC5iNjwmJlmGuTAwO40UjSo6L
Checks for missing Authenticode signature.
resource |
---|
2b09ba85e388ccbeaab7c40f64cc2a56 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateThread
GetWindowsDirectoryA
CloseHandle
CreateFileA
GetTempFileNameA
GetTempPathA
SetFileTime
GetFileTime
GetModuleFileNameA
DisableThreadLibraryCalls
WideCharToMultiByte
lstrlenW
lstrcpyA
lstrcatA
MultiByteToWideChar
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEndOfFile
SetFilePointer
IsBadCodePtr
GetOEMCP
GetLastError
LocalFree
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapCreate
VirtualFree
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapSize
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
ReadFile
GetCPInfo
GetACP
CharNextA
MessageBoxA
GetMessageA
CreateFontIndirectA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
SysAllocString
SysFreeString
VariantClear
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
SysAllocStringLen
DeleteUrlCacheEntry
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ