DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d7fe1f922d44433e244366a1d88ff61.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d7fe1f922d44433e244366a1d88ff61.dll
Resource
win10v2004-20231215-en
Target
4d7fe1f922d44433e244366a1d88ff61
Size
243KB
MD5
4d7fe1f922d44433e244366a1d88ff61
SHA1
78493787dea9eb6671d2d8b202baa08a103170bf
SHA256
4c7caedd1b69e07eda1169adea6804a83952cf686d79e721e9ccf265a8aab6a2
SHA512
351d44d7ff5516bde7e575b446f4d25a84f7624b3f2c7e52ae53fb73f6f86b536dddf59b60c13c63ecc3303b2960a705c6593dfe1e221ec5b5f0e3b94e2cfa4b
SSDEEP
6144:myuP/p9xk4OIMoNMHYFbwv8R6rdUYLa+JaLa+AaGa+AV:mTPeAfk0R6rdUYLa+JaLa+AaGa+AV
Checks for missing Authenticode signature.
resource |
---|
4d7fe1f922d44433e244366a1d88ff61 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
TerminateThread
GetExitCodeThread
SetEvent
FindFirstChangeNotificationW
FindCloseChangeNotification
GetFileSize
CreateFileW
lstrcatW
ExpandEnvironmentStringsW
lstrcpyW
GetTempPathW
FindClose
FindNextFileW
CompareFileTime
GetFileTime
lstrcmpW
FindFirstFileW
ReadFile
DeleteFileW
GetACP
CopyFileW
GetTempFileNameW
WaitForMultipleObjects
GetSystemTimeAsFileTime
CreateEventW
GetProcAddress
lstrcpynW
GetTickCount
WriteFile
GetCurrentThreadId
GetSystemTime
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalSize
GlobalFree
GlobalReAlloc
GlobalAlloc
ReleaseMutex
ReleaseSemaphore
InterlockedExchangeAdd
Sleep
UnmapViewOfFile
MapViewOfFile
CreateSemaphoreW
CreateMutexW
OpenFileMappingW
CreateFileMappingW
SetEndOfFile
CreateFileA
GetStringTypeW
GetStringTypeA
WriteConsoleW
GetConsoleOutputCP
WaitForSingleObject
GetVersionExW
WideCharToMultiByte
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
GetCurrentProcessId
ProcessIdToSessionId
GetComputerNameW
GetModuleFileNameW
GetModuleHandleW
LocalFree
GetProcessHeap
HeapFree
HeapAlloc
lstrlenW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
WriteConsoleA
FlushFileBuffers
SetStdHandle
SetFilePointer
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetConsoleMode
GetConsoleCP
ExitProcess
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
GetCommandLineA
CreateThread
ExitThread
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
CharLowerBuffW
UnregisterClassA
CharNextW
LoadStringW
CharLowerW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
CryptDestroyKey
CryptDeriveKey
CryptDecrypt
CryptEncrypt
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegGetKeySecurity
RegOpenKeyW
RegSetKeySecurity
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupAccountNameW
ConvertSidToStringSidW
RegQueryInfoKeyW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitializeEx
GetHGlobalFromStream
CreateStreamOnHGlobal
CoTaskMemRealloc
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
VariantInit
VariantClear
SysAllocStringByteLen
SafeArrayCreateVector
SafeArrayCreate
SafeArrayGetElement
SafeArrayPutElement
SafeArrayDestroy
VarBstrCmp
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
SysStringByteLen
SHCreateStreamOnFileW
PathFileExistsW
WTSCloseServer
WTSOpenServerW
WTSFreeMemory
WTSQuerySessionInformationW
NetApiBufferFree
NetWkstaUserEnum
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ