DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d1ea94d6cfc0a878a04927fd64a6766.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3d1ea94d6cfc0a878a04927fd64a6766.dll
Resource
win10v2004-20231222-en
Target
3d1ea94d6cfc0a878a04927fd64a6766
Size
32KB
MD5
3d1ea94d6cfc0a878a04927fd64a6766
SHA1
5d31895fd05d130dc629361937c0f1cf95e97a60
SHA256
76176611d9e5cf918eb853e6afd26cde33a2ad1b5067cad69e0da087519767be
SHA512
76f265fd48035f55804a65d1c30689f9bf6bc33839617d519e44a1eead953ac04aabbcad35a7fc083e52032457ce43872b77d10564ee61fe2a8cd37e44ed0c17
SSDEEP
384:PBsEV8dPVWkVhT2uBBQARQklzzdYv1goBecJzsEHH:ZsmMPBBBQARQklXmZBRq
Checks for missing Authenticode signature.
resource |
---|
3d1ea94d6cfc0a878a04927fd64a6766 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetEvent
OpenEventA
CreateEventA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
WinExec
VirtualProtect
lstrcatA
IsBadReadPtr
CreateThread
Sleep
GetModuleHandleA
GlobalAlloc
GlobalLock
GetCurrentProcessId
OpenProcess
ReadProcessMemory
InitializeCriticalSection
CloseHandle
CallNextHookEx
SetWindowsHookExA
wsprintfA
RegSetValueExA
RegOpenKeyA
RegCloseKey
SysFreeString
LoadRegTypeLi
SysStringLen
ord18
ord15
ord16
ord21
ord57
ord32
ord58
ord30
ord23
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
_adjust_fdiv
_strcmpi
_strlwr
_itoa
malloc
_initterm
free
??2@YAPAXI@Z
_purecall
strlen
strcpy
strstr
memcmp
memset
sscanf
_ftol
strcat
strrchr
memcpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ