DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
402f4e6349a5595e3bacd961976841ac.dll
Resource
win7-20231215-en
Target
402f4e6349a5595e3bacd961976841ac
Size
40KB
MD5
402f4e6349a5595e3bacd961976841ac
SHA1
0d4777c1cb148a77d50a9eed94c5b27d8a5d8205
SHA256
b57c6998d7f1db1e3765285bba6d1014b2530492cb68705f838b6f58370a6b34
SHA512
8aefb4192a66d87e70699b617f9f47a009a86e520514476c9918d11d49038cf544d53479f7933ca6b556b3b7888958af9564938abd002f363c426624e38b5a91
SSDEEP
768:65ywyEUTtELAJdb99VvDMo9VaGn8MHjcG:65y3EUTOOJbyoKMHjcG
Checks for missing Authenticode signature.
resource |
---|
402f4e6349a5595e3bacd961976841ac |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetErrorMode
CreateFileA
CreateProcessA
CloseHandle
WideCharToMultiByte
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
Sleep
OutputDebugStringA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
FindWindowA
ShowWindow
MessageBoxA
SetWindowLongA
EndDialog
GetDlgItem
SendMessageA
SetForegroundWindow
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
VariantCopy
VariantChangeType
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
ord22
ord18
ord32
ord16
ord21
ord23
ord58
ord30
ord15
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ