DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2cfa35b770af5b3e4925a87502433b45.dll
Resource
win7-20231215-en
Target
2cfa35b770af5b3e4925a87502433b45
Size
60KB
MD5
2cfa35b770af5b3e4925a87502433b45
SHA1
ba6c0d2248cb3cb4e53bb827350232c0c597c6e1
SHA256
cf271fd07f5232093dec2a516d313ac4c1dd604186858656df504c2ddda6ee8c
SHA512
a27177a7bbdb70aa7a94dcb8f7608bd0e6004658f27405af817dca151714c96a423b10fa959f1d211f875849223cf11d7cb268f2300b1f033767f62bdc4fff2e
SSDEEP
1536:F2qt93behVtCAs/0x6KqzamUi4aE4zMAd5l:Fl931imn4aEAMAd5
Checks for missing Authenticode signature.
resource |
---|
2cfa35b770af5b3e4925a87502433b45 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WritePrivateProfileStringA
LocalFree
Process32Next
Process32First
FindNextFileA
DeleteFileA
GetPrivateProfileStringA
FindFirstFileA
SetFileAttributesA
MoveFileA
LeaveCriticalSection
GetCommandLineW
Sleep
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
GetCurrentProcessId
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetProcAddress
CreateThread
LoadLibraryA
FreeLibrary
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
EnterCriticalSection
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strcmp
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
_purecall
atoi
memset
sprintf
_access
strcat
??3@YAXPAX@Z
strstr
memcmp
??2@YAPAXI@Z
strlen
strcpy
_stricmp
strrchr
strncpy
strchr
strncmp
memcpy
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ