DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5a30ed94f2ede84bcbeff96ba2d6e878.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a30ed94f2ede84bcbeff96ba2d6e878.dll
Resource
win10v2004-20231215-en
Target
5a30ed94f2ede84bcbeff96ba2d6e878
Size
36KB
MD5
5a30ed94f2ede84bcbeff96ba2d6e878
SHA1
7151a4992fdcd8aac53d909681265b6d2ec2a9df
SHA256
c0b4d199546bd87d102afc50a5b89626510ee91a78b0bbc8b08cdcb51d56690c
SHA512
7d903cd6a8943d016ba7b7329d95f95ad6acbbf3c761ac3d8b44b712cbbdce7b621d40966fad3390be12c882f604be02db33ad17d0ccbd62558b8459df62adfe
SSDEEP
384:E/MsZDeGxS3BlTrnCCnLeUdsAvUmklTZvJCRG0Z27:E/MSf8RlfnfnyUOmkLvJOXk
Checks for missing Authenticode signature.
resource |
---|
5a30ed94f2ede84bcbeff96ba2d6e878 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
lstrcatA
lstrcpyA
lstrcmpiA
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
GetWindowsDirectoryA
lstrcpynA
MoveFileExA
CopyFileA
GetTempFileNameA
GetVersionExA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetShortPathNameA
CloseHandle
CreateFileA
GetSystemDirectoryA
WriteFile
CreateDirectoryA
FindClose
FindFirstFileA
WaitForSingleObject
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFileSize
Sleep
SetFileTime
FlushFileBuffers
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
GetCurrentProcessId
GetTickCount
ReadFile
GetTempPathA
lstrcmpA
GetLocalTime
InterlockedExchange
DisableThreadLibraryCalls
fclose
fgets
fseek
fopen
??3@YAXPAX@Z
_itoa
??2@YAPAXI@Z
sscanf
_snprintf
_except_handler3
__CxxFrameHandler
atol
free
_initterm
malloc
_adjust_fdiv
InternetCrackUrlA
InternetGetConnectedState
htons
connect
WSAGetLastError
select
recv
ioctlsocket
socket
closesocket
WSACleanup
WSAStartup
send
gethostbyname
__WSAFDIsSet
PathRemoveFileSpecA
StrStrA
StrRChrA
SHDeleteKeyA
SHDeleteValueA
PathAddBackslashA
PathRemoveBackslashA
PathFindFileNameA
PathRemoveExtensionA
StrStrIA
ShellExecuteA
SHGetFolderPathA
SetupIterateCabinetA
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ