DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
50a26b7bcf046613f9825c8db35eb2d9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50a26b7bcf046613f9825c8db35eb2d9.dll
Resource
win10v2004-20231222-en
Target
50a26b7bcf046613f9825c8db35eb2d9
Size
44KB
MD5
50a26b7bcf046613f9825c8db35eb2d9
SHA1
45aa9074f4114297175cc563401610fdf148ef24
SHA256
cc831498055a27984496ff66716e1c6a4debe9f9e721979074cf507c37973766
SHA512
1c15b6323ecdd77e01bb1bbc811d6c0b842c3dc19d7909f0df89de17c84932d51a8cee1d029891507d2f85dd0b0376ef0624f075675426546da1790fe0176d86
SSDEEP
384:Kxpei7ETMAV1Dx0aMH12O7JeuriBE0Dtkav5+n5GGh2yFaNC3krOHYiJpJgLa0M6:Klq90Fl76DpkavuVHYSgLa1hA
Checks for missing Authenticode signature.
resource |
---|
50a26b7bcf046613f9825c8db35eb2d9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateThread
GetModuleFileNameA
CreateMutexA
WinExec
GetLastError
GetSystemDirectoryA
CreateProcessA
VirtualAlloc
InterlockedIncrement
GetLocalTime
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateWindowExA
SetWindowsHookExA
DefWindowProcA
PostMessageA
ShowWindow
CallNextHookEx
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
RegisterClassExA
FindWindowExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
fopen
_adjust_fdiv
malloc
_initterm
free
strrchr
_except_handler3
__CxxFrameHandler
strchr
_stricmp
fwrite
fclose
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ