DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3c1ea17b1fc2e5a36b6b936b2902cb9b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c1ea17b1fc2e5a36b6b936b2902cb9b.dll
Resource
win10v2004-20231222-en
Target
3c1ea17b1fc2e5a36b6b936b2902cb9b
Size
48KB
MD5
3c1ea17b1fc2e5a36b6b936b2902cb9b
SHA1
e4cf3d7188430ba79a10c7b0e948e169a265bf48
SHA256
febacfaec31197cbac9eda8a26a4a16c636c928367ef8dca53c5bbc590fc31c0
SHA512
968e62c4c426b3bad03404f8753cca7ada1a89f4f0ae80e047cb5ca5eec520257065b4c5204fe1471dbd06db942ee48a56d9379448141acb4aee17cf59799989
SSDEEP
768:aKbwwCynWc1lkBg1uB4s9mqzc2TXK5QlwK4wxshmU/j4Ek:aKbIyWcPkO18V9mqpXb74wx+/j4E
Checks for missing Authenticode signature.
resource |
---|
3c1ea17b1fc2e5a36b6b936b2902cb9b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
socket
htons
connect
ioctlsocket
gethostbyname
send
closesocket
recv
LocalFree
CreateThread
IsBadStringPtrA
GetModuleHandleA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
lstrcpynA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
wsprintfA
GetWindowTextA
GetParent
ScreenToClient
GetClassNameA
PeekMessageA
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_initterm
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
atoi
free
isalpha
isdigit
realloc
malloc
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ