DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
592bd0a446ce8b94a247c445dd2cf8d8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
592bd0a446ce8b94a247c445dd2cf8d8.dll
Resource
win10v2004-20231215-en
Target
592bd0a446ce8b94a247c445dd2cf8d8
Size
48KB
MD5
592bd0a446ce8b94a247c445dd2cf8d8
SHA1
20708c8e8b77dfc5fd87f3b3cc87e6160ccd9710
SHA256
2c67d240885b7aa9630f273791a651ab30f77d10d10ea2564efc9349ca284d58
SHA512
d1d808e6ff69f81264b9c9e748539f8b44511efed9e3ba43984fe241cbd698e8d85f9ba6283f9d0b4fd79cddeb4f6f4f46049da1ab363b02e641f614b4e4f2e3
SSDEEP
768:rpkavX8s1ozOSrnryzaXEIeAqpbyeg1yosogLa1Vkqm:Op+o6Re0ZaIfpLavVm
Checks for missing Authenticode signature.
resource |
---|
592bd0a446ce8b94a247c445dd2cf8d8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
CreateMutexA
WinExec
GetWindowsDirectoryA
GetLastError
GetLocalTime
CreateThread
VirtualAlloc
CreateProcessA
GetModuleFileNameA
CloseHandle
InterlockedIncrement
GetSystemDirectoryA
UnhookWindowsHookEx
SetWindowsHookExA
ShowWindow
KillTimer
SetTimer
DefWindowProcA
FindWindowExA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CallNextHookEx
CreateWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
_except_handler3
__CxxFrameHandler
strchr
fopen
_stricmp
fwrite
fclose
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
strrchr
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ