DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3a6afa426c39cf18aeb396bb2f6521ff.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a6afa426c39cf18aeb396bb2f6521ff.dll
Resource
win10v2004-20231215-en
Target
3a6afa426c39cf18aeb396bb2f6521ff
Size
48KB
MD5
3a6afa426c39cf18aeb396bb2f6521ff
SHA1
7b0475f7b2a647a3f42d4188f2f939b7b6d95e65
SHA256
a908b4857dc6ceb001875ae51a43aa206926f7e8f111de37fcf4446f966e546b
SHA512
59899bf0ef13f0d98ba915e66b2de84976ccfc02dbe78c732da59d1aea636b29850a798b871984a43cd679f3991c8a05b090c5e560716b87634e604b8db4d3e6
SSDEEP
384:6Vv3/5+dOsFNK3M/HyAa/k38X68+smr8oCDtkav5fcqqn3WTnYjJpJgLa0MptWtB:shiE3MqAq6Mmo5pkavGJ3WLY1gLa1Ss
Checks for missing Authenticode signature.
resource |
---|
3a6afa426c39cf18aeb396bb2f6521ff |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetLocalTime
GetProcAddress
CreateProcessA
GetModuleFileNameA
InterlockedIncrement
VirtualAlloc
CreateThread
CloseHandle
CreateMutexA
GetLastError
KillTimer
SetTimer
DefWindowProcA
SetWindowsHookExA
GetMessageA
CallNextHookEx
DispatchMessageA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
RegisterClassExA
TranslateMessage
UnhookWindowsHookEx
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
strrchr
strchr
fopen
fwrite
fclose
_stricmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv
sprintf
__CxxFrameHandler
_except_handler3
SHGetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ