DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ee3b480d4c8f36f6de37a785ff9d6cc.dll
Resource
win7-20231215-en
Target
3ee3b480d4c8f36f6de37a785ff9d6cc
Size
108KB
MD5
3ee3b480d4c8f36f6de37a785ff9d6cc
SHA1
571bdcc93fa721e22517089bda7c47f4e4608a02
SHA256
6ae1caf31033c4f23982d3bc80437b1bc11ef18aedec6c7ead24150ef19fb6f7
SHA512
a64d50adcdcbb0e19ca4cb7dcde2578f32971e34b7be5603e2291cabc62e69cd291b441701882a9e77efef54125d8985c429f42e7d74ac4d4074e9c9a00aca09
SSDEEP
1536:wOLO6p6nMFcKTlFr8fmoKbFRnlxA069VEFBGy0KsWTcKQCO41nk7yDjqlDXs:wOLOfMF9nlVFNSy0KsRKQfCWyDjqlb
Checks for missing Authenticode signature.
resource |
---|
3ee3b480d4c8f36f6de37a785ff9d6cc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
CopyFileA
MultiByteToWideChar
GetModuleFileNameA
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetTempFileNameA
GetTempPathA
GetLocalTime
lstrlenW
LocalFree
lstrcpyA
CreatePipe
HeapDestroy
GetLastError
CharNextA
MessageBoxA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
ShellExecuteA
CoCreateInstance
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
VariantClear
URLDownloadToFileA
_itoa
??1type_info@@UAE@XZ
_onexit
__dllonexit
_adjust_fdiv
_initterm
_CxxThrowException
wcslen
fseek
ftell
rewind
fread
realloc
_stricmp
memcmp
memcpy
_purecall
rand
fopen
strstr
strcmp
tolower
strcpy
strlen
??3@YAXPAX@Z
strcat
memset
??2@YAPAXI@Z
fclose
abs
strncpy
fgets
free
malloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ