DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d219a1db1a735d78069c2f010608934.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d219a1db1a735d78069c2f010608934.dll
Resource
win10v2004-20231215-en
Target
3d219a1db1a735d78069c2f010608934
Size
172KB
MD5
3d219a1db1a735d78069c2f010608934
SHA1
5a248a065b3b6af2cdca7a4d4cfbbd1d6bd1395d
SHA256
0c79099e1f71583a9c247594eddc659035341a78eb6e6123e6c563bdf8cbfc42
SHA512
36d30e3940e06afb78f1fc580f38ec1257e213f5653bdb2a0a30e9b21718fff8ac58da89aabce89142f9ff69ecd8bb144e263b08828a53c334fda79d3fedc8b0
SSDEEP
3072:ZeD/vFSTuEp9kkbr/auNohUAMo6AcnYHTTlxoU2TJZ75CkBY3:w/dSTuEQiWuNo75HfHnj2rdc3
Checks for missing Authenticode signature.
resource |
---|
3d219a1db1a735d78069c2f010608934 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
timeGetTime
UuidToStringA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
wcscmp
ispunct
strncpy
printf
isspace
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
strstr
strtol
atoi
tmpnam
fopen
tolower
__CxxFrameHandler
strchr
fwrite
??3@YAXPAX@Z
fclose
strtok
toupper
strerror
isxdigit
isgraph
?what@exception@@UBEPBDXZ
wcslen
isalnum
free
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
wctomb
islower
isalpha
isupper
malloc
??2@YAPAXI@Z
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
Netbios
SetSecurityInfo
GetSecurityInfo
RegCloseKey
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetEntriesInAclA
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetSetOptionA
InternetReadFile
InternetOpenUrlA
GetFileVersionInfoA
GetFileVersionInfoSizeA
CoCreateInstance
CoTaskMemFree
CoInitialize
CoCreateGuid
CoTaskMemAlloc
EnumWindows
wsprintfA
SystemParametersInfoA
SetWindowPos
OpenClipboard
CloseClipboard
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
EnumChildWindows
DispatchMessageA
KillTimer
SetTimer
TranslateMessage
DefWindowProcA
GetClassNameA
GetWindowThreadProcessId
StrStrIA
SHSetValueA
SHGetValueA
HeapFree
GetLocalTime
GetWindowsDirectoryA
GetSystemInfo
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
SetLastError
GetFullPathNameA
GetThreadTimes
Sleep
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessTimes
GetCurrentProcess
GetVersionExA
HeapSize
HeapAlloc
GetVersion
lstrcpyA
lstrcmpiA
lstrcmpA
MultiByteToWideChar
GetCurrentDirectoryA
CloseHandle
OpenProcess
GetCurrentProcessId
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
LocalFree
FormatMessageA
SleepEx
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpynA
CreateFileA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
lstrlenA
GetProcessHeap
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ