DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VXcNiiClnqPCBmmwSn
Static task
static1
Behavioral task
behavioral1
Sample
4d0b0ca6c0f580b5fbcaee2b2643538b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d0b0ca6c0f580b5fbcaee2b2643538b.dll
Resource
win10v2004-20231215-en
Target
4d0b0ca6c0f580b5fbcaee2b2643538b
Size
44KB
MD5
4d0b0ca6c0f580b5fbcaee2b2643538b
SHA1
cd9533560d53020f649f970f1bb1ef86d70b95c8
SHA256
791dcd3a87df2f6494039cb7cb170a319ed8a48ce97679b30215fa31742b5c25
SHA512
1f6bfe36ab3db1a1a33669bb5668b80b5e41de6b16a9ad9296f1fdf73e5437e9455156364c2eec14b42bb204ce7e261c841e6d423b3004a6f61eec20f4f69574
SSDEEP
768:ypkavx9/8lwohKtxWkYHq+XV6yVBgLa1:hLlwqjq+gkuLa
Checks for missing Authenticode signature.
resource |
---|
4d0b0ca6c0f580b5fbcaee2b2643538b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMutexA
CreateThread
LoadLibraryA
GetLocalTime
GetLastError
InterlockedIncrement
GetProcAddress
VirtualAlloc
CloseHandle
GetModuleFileNameA
WinExec
GetSystemDirectoryA
GetWindowsDirectoryA
SetWindowsHookExA
UnhookWindowsHookEx
FindWindowExA
PostMessageA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
CreateWindowExA
ShowWindow
RegisterClassExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
__CxxFrameHandler
strrchr
div
isalnum
isalpha
ispunct
_stricmp
_initterm
malloc
_adjust_fdiv
fclose
fwrite
fopen
sprintf
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
isupper
isspace
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VXcNiiClnqPCBmmwSn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ