COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
577b5a538a29b457118a08c13b35593d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
577b5a538a29b457118a08c13b35593d.dll
Resource
win10v2004-20231215-en
Target
577b5a538a29b457118a08c13b35593d
Size
33KB
MD5
577b5a538a29b457118a08c13b35593d
SHA1
8ad471aa48b0330c35105d5c41b2a1b6d15d5ec1
SHA256
c29e250a5a5ccddf483b289cd6c62dd7b832859ba04fed55e74f39443cc16c00
SHA512
0d635a79a6597a445b9f130d6feaf467b6503b4964fdcae1519b5d77e4fb6e23e65e9a2082aa3cae9ab8b59ea473729f04302f70fc01900ab9464f44ce041cae
SSDEEP
768:7f/fosuj44q2F3FLBa7H7Qt7kZYnhYDLR2liJB2:bnozB4bY7kZ0+vRno
Checks for missing Authenticode signature.
resource |
---|
577b5a538a29b457118a08c13b35593d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalLock
GetSystemDirectoryA
CreateThread
WaitForSingleObject
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GlobalUnlock
SetFileAttributesA
ExitProcess
GetCommandLineA
GlobalFree
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
Sleep
MultiByteToWideChar
GetCurrentDirectoryA
GetFileAttributesA
GetPrivateProfileStringA
DeleteFileA
CreateFileA
GetFileSize
ReadFile
CloseHandle
WideCharToMultiByte
WriteFile
GetParent
GetWindowThreadProcessId
EnumWindows
wsprintfA
GetWindowTextA
ReleaseDC
GetWindowRect
GetDC
GetDesktopWindow
GetClientRect
CallWindowProcA
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipDisposeImage
GdiplusShutdown
GdipSaveImageToFile
GdipLoadImageFromFile
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
strrchr
_access
strcat
strchr
strncpy
abs
malloc
memcpy
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
free
__CxxFrameHandler
strcmp
atoi
wcscmp
wcscpy
sprintf
strcpy
fopen
fgets
strstr
fclose
??2@YAPAXI@Z
memset
strlen
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ