DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
541b0afc2b99e8fc576dccdf3592f312.dll
Resource
win7-20231129-en
Target
541b0afc2b99e8fc576dccdf3592f312
Size
64KB
MD5
541b0afc2b99e8fc576dccdf3592f312
SHA1
eb0002b34e9f451ad42dd6098863892864625f08
SHA256
e27333b0f373caf033f67f99823720a68455a0f58a41f4655a257eb4faf1cf1f
SHA512
d4a128094825d2818b3813c6f190d51a48b36cdc7cdfd430fa630ac54916ecfd287752e0ca5b7d1287b38e9e922b37a3b839afc85c38d7cf40765dc1ec0f73da
SSDEEP
1536:MHgl8goDm/9jhMyae4MYU13hXWd7Xwk09:dl8goa5iEidskQ
Checks for missing Authenticode signature.
resource |
---|
541b0afc2b99e8fc576dccdf3592f312 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
CloseHandle
CreateProcessA
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
Sleep
RemoveDirectoryA
GetCommandLineW
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateThread
LocalFree
GetCurrentProcessId
ExitProcess
Process32Next
Process32First
GetShortPathNameA
lstrlenA
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
WritePrivateProfileStringA
CreateDirectoryA
RegSetValueExA
RegCreateKeyExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strstr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
_wcslwr
wcsstr
fopen
fseek
ftell
fread
fclose
strrchr
sprintf
??3@YAXPAX@Z
_access
strcat
strlen
memcpy
_purecall
??2@YAPAXI@Z
memcmp
memset
_strupr
strncpy
strchr
strncmp
strcpy
strcmp
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ