DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
56189401b9e8d94a55db18e6c611e53c.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56189401b9e8d94a55db18e6c611e53c.dll
Resource
win10v2004-20231215-en
Target
56189401b9e8d94a55db18e6c611e53c
Size
59KB
MD5
56189401b9e8d94a55db18e6c611e53c
SHA1
fc15328f6f6d33d55e0fd49e9ba29171a882f0fd
SHA256
73fdc7dc5e32763d4144eb678d218c91cfc8cdf74bb312af22240c91230b5df9
SHA512
059f5b9be8275fb53e79fe0e5fc2abb3d037e79a0d03ec2c4ce54d1bc83e9afe5a878e8bd646c5a33fca5fc5d8dad7687a4fca4ba3f6252cdbdcb0f58b54554e
SSDEEP
768:2P5fbPZrmYstSeOUkGvhRpEHPCmL2f0XNf8gM+p4op4VtxOgXrO:2xfbPmOUkOc40XNfT/4q4Tpa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
56189401b9e8d94a55db18e6c611e53c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
SizeofResource
LoadResource
FindResourceA
WideCharToMultiByte
GetModuleHandleA
GetModuleFileNameA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryExA
GetLastError
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
CreateProcessA
LockResource
GetSystemTimeAsFileTime
DebugBreak
HeapReAlloc
HeapFree
GetShortPathNameA
lstrlenA
GetVersionExA
lstrlenW
HeapCreate
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
GetSystemInfo
HeapAlloc
SetFileTime
SystemTimeToFileTime
CloseHandle
CreateFileA
WriteFile
SetEndOfFile
GetTempPathA
GetTempFileNameA
RegEnumKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
ShellExecuteA
wsprintfA
CharNextA
InternetGetConnectedState
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE