DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
55aca9c7b0b4ef303cbe1afdd256249f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55aca9c7b0b4ef303cbe1afdd256249f.dll
Resource
win10v2004-20231222-en
Target
55aca9c7b0b4ef303cbe1afdd256249f
Size
85KB
MD5
55aca9c7b0b4ef303cbe1afdd256249f
SHA1
eb96a70983209f6cd68ddb2149a21ae06f1bcc32
SHA256
7531f55572135202b0785e434af2d3171a57a34f756b3233f4c4c2a40ced288e
SHA512
425242e9b0be5ca0c8b65522edc1402c8a1858b15c7b3bee0d96ec3937c11dff9086fc4f3f76fcd7a260d1d25a5a51890b5b881b6af2e199e5bed1d0358c6bad
SSDEEP
768:jSkUduIp0weHGXKQAYM7mOUTkGmRXbUl:jYFp0weHGXKWl5wXQ
Checks for missing Authenticode signature.
resource |
---|
55aca9c7b0b4ef303cbe1afdd256249f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
LoadLibraryA
GetModuleFileNameA
CompareStringA
CreateToolhelp32Snapshot
Process32First
CloseHandle
lstrcatA
lstrcpyW
GetVersion
OutputDebugStringA
ResetEvent
GetModuleHandleA
GetProcAddress
SetLastError
GetLastError
GetModuleHandleW
GetModuleFileNameW
GetFileAttributesW
LoadLibraryW
GetProcessHeap
lstrlenA
RtlUnwind
RegisterClassA
CharLowerA
EndPaint
DestroyWindow
LoadBitmapA
GetClientRect
SendMessageA
BeginPaint
wsprintfW
SetWindowLongA
UnregisterClassA
GetWindowLongA
CreateWindowExA
ShowWindow
GetClassInfoA
IsWindow
CallWindowProcA
CreateFontA
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
RegOpenKeyExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
CoInitialize
CoUninitialize
CoCreateInstance
SysFreeString
SysAllocString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ