DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetVer
Install
Static task
static1
Behavioral task
behavioral1
Sample
64e88599e13b2b69a9e498a1dbbf0c10.dll
Resource
win7-20231129-en
Target
64e88599e13b2b69a9e498a1dbbf0c10
Size
64KB
MD5
64e88599e13b2b69a9e498a1dbbf0c10
SHA1
dfda935191ae6ad8175480737247a16e9b306468
SHA256
ccfd905109ab95587790e5f860a558465138103aaed723a6dc95235a770292bc
SHA512
17a8172ce8c5329e97aea5e07adc18ae408050e509e98a267c3e303a73a451bbd1d67034ea4b78a6a0c1199e842fb6b64c30481f2b0c09417d58cab3b91dedbb
SSDEEP
768:iCZiOKmp8ZjQGJTIxq3nZN9nuWknfyD4I6xLWHeNhF+GQF9sQmJl69vF:SOVp8ZjpoqXgWT6xHN6G0jmPw9
Checks for missing Authenticode signature.
resource |
---|
64e88599e13b2b69a9e498a1dbbf0c10 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LeaveCriticalSection
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
lstrcpyW
lstrcatW
DeleteFileA
WinExec
GetBinaryTypeA
GetTickCount
GetTempPathA
DeleteCriticalSection
InitializeCriticalSection
GetLocalTime
DisableThreadLibraryCalls
GetCurrentThreadId
lstrlenA
LoadLibraryW
GetProcAddress
WideCharToMultiByte
FreeLibrary
GetModuleHandleA
GetModuleFileNameA
CreateThread
Sleep
GetCurrentProcess
GetLastError
CloseHandle
SetWindowsHookExW
CallNextHookEx
FindWindowA
CharNextW
GetMessageW
PostThreadMessageW
SetForegroundWindow
UnhookWindowsHookEx
FindWindowExA
SendMessageW
FindWindowExW
GetClassNameA
SendMessageA
PostMessageW
CharLowerA
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegQueryValueExW
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
AdjustTokenPrivileges
ShellExecuteA
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoTaskMemFree
LoadRegTypeLi
SysStringLen
LoadTypeLi
SysAllocString
VarUI4FromStr
VariantInit
VariantClear
SysFreeString
RegisterTypeLi
GetRoleTextA
AccessibleObjectFromWindow
WindowFromAccessibleObject
GetStateTextA
free
realloc
memcmp
strchr
strncmp
fclose
fwrite
rename
_access
wcslen
wcscmp
_initterm
_adjust_fdiv
_stricmp
malloc
calloc
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
atoi
strcat
swprintf
getchar
wprintf
strcmp
_splitpath
fopen
fgets
strstr
strcpy
memcpy
sprintf
strlen
memset
connect
htons
closesocket
socket
recv
gethostbyname
WSAStartup
inet_addr
send
Netbios
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetVer
Install
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ