DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5015cdf01a2107b7558fa1af41a8d3a6.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5015cdf01a2107b7558fa1af41a8d3a6.dll
Resource
win10v2004-20231222-en
Target
5015cdf01a2107b7558fa1af41a8d3a6
Size
48KB
MD5
5015cdf01a2107b7558fa1af41a8d3a6
SHA1
63fcef72f93b3550573f2b80fa56e89dcb89ab7f
SHA256
72e8acfa7c26a93d283af98930d7c45345f88e5b7e153dfbbfdd13bb0c8ba3df
SHA512
f1ca2835a472703577ad51ecb7fc1bdda879cf8c65d14c11e1abbebe7983f826caac8a1c805dcc5ff2d1ab1ed33fb470e02d5a766590f0863e3d88fde58eba89
SSDEEP
768:R7G/YgLDdpkavJUXheMrgNzKz4cgLa1GMQ:GYgLDEStzGkLa4M
Checks for missing Authenticode signature.
resource |
---|
5015cdf01a2107b7558fa1af41a8d3a6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
InterlockedIncrement
CreateThread
VirtualAlloc
GetProcAddress
CreateProcessA
GetSystemDirectoryA
WinExec
GetWindowsDirectoryA
CreateMutexA
GetLocalTime
GetLastError
CloseHandle
LoadLibraryA
GetMessageA
DispatchMessageA
RegisterClassExA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
KillTimer
SetTimer
DefWindowProcA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
TranslateMessage
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
free
strchr
fopen
fwrite
fclose
__CxxFrameHandler
_stricmp
sprintf
_except_handler3
_initterm
malloc
_adjust_fdiv
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ