DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4e56c0c6bf641c4dcf748de862f70778.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e56c0c6bf641c4dcf748de862f70778.dll
Resource
win10v2004-20231215-en
Target
4e56c0c6bf641c4dcf748de862f70778
Size
168KB
MD5
4e56c0c6bf641c4dcf748de862f70778
SHA1
6847fd180f6f1a4fb2d8204fc442d6f8f7f138bd
SHA256
11a0ee1ba5948b475235dafe62bebd52a1237af7403ddd9fbcb4df04a47a376c
SHA512
5bfa089d9a1ac01827b6447f3b85353872e89b61b9becb8ddd8a90a25b310ecff3cf19a0107d8772748cc970cfae5ccfe5952de27f74e9410349c6c1b4ee532b
SSDEEP
3072:49MinoDYXKz2svIUHGnhcc7IQ1ZDcCeMveK0zUJqXqLFhvU/:491aqsvIUHGnhccsyYhgCz/XqLFh8/
Checks for missing Authenticode signature.
resource |
---|
4e56c0c6bf641c4dcf748de862f70778 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
timeGetTime
UuidToStringA
SHSetValueA
StrStrIA
SHGetValueA
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
isgraph
_CxxThrowException
strtol
atoi
tmpnam
??3@YAXPAX@Z
??1exception@@UAE@XZ
??2@YAPAXI@Z
__CxxFrameHandler
isspace
strchr
strncpy
islower
isupper
tolower
ispunct
printf
isalnum
isxdigit
isalpha
strerror
wctomb
malloc
wcscmp
wcslen
?what@exception@@UBEPBDXZ
toupper
strtok
strstr
free
fopen
fwrite
fclose
RegCloseKey
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
EnumProcesses
GetModuleBaseNameA
EnumProcessModules
GetFileVersionInfoA
GetFileVersionInfoSizeA
CloseClipboard
KillTimer
EnumWindows
GetMessageA
TranslateMessage
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
SetWindowPos
SystemParametersInfoA
DefWindowProcA
wsprintfA
DispatchMessageA
SetTimer
ShowWindow
CreateWindowExA
RegisterClassExA
OpenClipboard
Netbios
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
InternetSetOptionA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
GetModuleHandleA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemInfo
GetCurrentProcess
GetProcessTimes
GetLocalTime
SetLastError
GetSystemDirectoryA
lstrlenA
lstrcpyA
SleepEx
lstrcmpA
lstrcmpiA
GetModuleFileNameA
GetFullPathNameA
lstrcpynA
GetProcessHeap
GetVersion
GetThreadTimes
HeapSize
Sleep
FormatMessageA
LocalFree
GetLastError
HeapFree
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
CreateFileA
OpenProcess
GetCurrentProcessId
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
CreateRemoteThread
WriteProcessMemory
CloseHandle
GetCurrentThread
GetWindowsDirectoryA
GetCurrentDirectoryA
GetVersionExA
HeapAlloc
VirtualAllocEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ