DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5783e5bfe10dc9b886ded8334ae9046b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5783e5bfe10dc9b886ded8334ae9046b.dll
Resource
win10v2004-20231222-en
Target
5783e5bfe10dc9b886ded8334ae9046b
Size
44KB
MD5
5783e5bfe10dc9b886ded8334ae9046b
SHA1
fc07ba4e174dffa996349da12439b37adf91f1bc
SHA256
389e421c7aba50b2a94d4187d05387db8cb3b00b24341ae356659298f440739a
SHA512
096bb667e240a317b9d22e10641200a36c038945a4e5514ef9b2f7f72b0cc852310d0c72592b165cf81b75eef95755652476bcdf74bda2c05291f227a32ab8ff
SSDEEP
384:+wlklmdVfCep9Z4HwlBxCZ9o4uj6Dtkav5ejC4e9EJpJgLa0MpFSuL:NVft9ZGwFQ9+6pkavF4o0gLa1PSuL
Checks for missing Authenticode signature.
resource |
---|
5783e5bfe10dc9b886ded8334ae9046b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetLastError
CreateMutexA
LoadLibraryA
VirtualAlloc
CreateProcessA
CreateThread
GetLocalTime
CloseHandle
InterlockedIncrement
GetModuleFileNameA
GetProcAddress
KillTimer
SetTimer
RegisterClassExA
DefWindowProcA
UnhookWindowsHookEx
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
CallNextHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
strchr
fopen
fwrite
_stricmp
fclose
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv
sprintf
strrchr
__CxxFrameHandler
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ