DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6fe9bb1b2769ddd37588df954b5208ab.dll
Resource
win7-20231215-en
Target
6fe9bb1b2769ddd37588df954b5208ab
Size
304KB
MD5
6fe9bb1b2769ddd37588df954b5208ab
SHA1
5372b87f2739c84c8c7988f85bc25a92ad9c48e3
SHA256
5cffaf2f91ba08f182381542d136a77ef2f00eecae17f4534319fb89932fee15
SHA512
95450ae9f829a414e9c88e5b638ed23464287666119e4649588f359fba66cc2d6b714b32661ad317064381002d69c3c1a66df38f60b78e0ce877766930988703
SSDEEP
3072:A5W3//k+QF4xCrKgNwe07GoWvNqetqm0cFXkzjFjy1FN3gqWwOcFXkzjFjy1FN3G:bOsCpw17GoicJlcFkRYFN8cFkRYFNp7
Checks for missing Authenticode signature.
resource |
---|
6fe9bb1b2769ddd37588df954b5208ab |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteUrlCacheEntry
URLDownloadToFileA
GetShortPathNameA
GetModuleHandleA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
DeleteFileA
GetTempFileNameA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
GetVersionExA
lstrcmpA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
WinExec
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrlenA
SetEndOfFile
ReadFile
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetFilePointer
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
SetLastError
TlsFree
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapSize
ExitProcess
RaiseException
GetVersion
GetCommandLineA
ExitThread
TlsGetValue
TlsSetValue
CreateThread
ResumeThread
RtlUnwind
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
HeapAlloc
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
InterlockedExchange
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetFileAttributesA
HeapReAlloc
LocalFree
ShowWindow
SendMessageA
GetWindow
GetFocus
GetWindowRect
GetSysColor
CharNextA
CharUpperA
wsprintfA
IsWindow
DestroyWindow
GetClientRect
LoadStringA
BeginPaint
FindWindowExA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RegisterWindowMessageA
GetDlgItem
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateAcceleratorTableA
GetParent
GetClassNameA
RedrawWindow
SetWindowPos
GetDesktopWindow
FillRect
EndPaint
GetDC
ReleaseDC
IsChild
SetFocus
CallWindowProcA
GetWindowLongA
DefWindowProcA
SetWindowLongA
CreateWindowExA
GetStockObject
GetObjectA
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetDeviceCaps
DeleteObject
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLockRunning
CoUninitialize
CoInitialize
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
VariantCopy
VariantChangeType
OleCreateFontIndirect
SysAllocStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
VariantInit
SysFreeString
VarUI4FromStr
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ