DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5c0c5de38cb06192dcd4a0f46696c678.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c0c5de38cb06192dcd4a0f46696c678.dll
Resource
win10v2004-20231222-en
Target
5c0c5de38cb06192dcd4a0f46696c678
Size
128KB
MD5
5c0c5de38cb06192dcd4a0f46696c678
SHA1
78a26e08fa893043f74d9e5f0e3aeb927d76839f
SHA256
cb6ca0f5c66a64cf7d5053f1ef2e46fb86946c6464504f67aeafab60c1b86ff6
SHA512
bd746bdf941ea7d2b78d8f2d4b799c1266ce988a8b2c7091505f759b28830da2594cc376843cd1dee111c5ea535d56c46d290d8c1c8e68a7372dfae9a8860fbc
SSDEEP
3072:BGEMgf2NG9CK28gdPLX7MmCDTotroQ1S:BGHG9s8g9L7MmWyxE
Checks for missing Authenticode signature.
resource |
---|
5c0c5de38cb06192dcd4a0f46696c678 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCombineUrlA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpQueryInfoA
InternetReadFile
URLDownloadToFileA
GetLastError
lstrlenA
InterlockedIncrement
GetModuleFileNameA
GetWindowsDirectoryA
InterlockedDecrement
SetFileTime
CreateFileA
GetFileTime
OpenFile
GetVersionExA
CloseHandle
DeviceIoControl
SetPriorityClass
GetCurrentProcess
lstrcmpiA
GetVolumeInformationA
GetUserDefaultLangID
GetSystemDefaultLangID
GetSystemTime
DisableThreadLibraryCalls
InitializeCriticalSection
lstrlenW
MultiByteToWideChar
GetShortPathNameA
GetModuleHandleA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WriteFile
DebugBreak
OutputDebugStringA
LCMapStringW
LCMapStringA
GetEnvironmentStrings
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
IsBadReadPtr
SetHandleCount
SetFilePointer
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
FlushFileBuffers
SetEndOfFile
SetStdHandle
GetEnvironmentStringsW
GetStartupInfoA
GetFileType
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
GetStringTypeW
RtlUnwind
GetTimeZoneInformation
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
ReadFile
FreeEnvironmentStringsA
TerminateProcess
GetStdHandle
GetStringTypeA
TlsGetValue
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
ExitProcess
GetCPInfo
GetACP
GetOEMCP
CharLowerA
MessageBoxA
LoadStringA
CharNextA
wvsprintfA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
ShellExecuteA
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ