DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
71ade47c69ee81fd17422b485debcaea.dll
Resource
win7-20231215-en
Target
71ade47c69ee81fd17422b485debcaea
Size
356KB
MD5
71ade47c69ee81fd17422b485debcaea
SHA1
561d3bb57ea6fa02f10a2117e0a6c896a65fb34e
SHA256
a011ccde77f7d31a20dc5e0c3182fa294f9bbf87578d2e040d25ab99ec21ea98
SHA512
a91d66fb2ec55126d148c2da3e1c4a91045ff9ea1d9c79f147d8644d6a5877b9a385267ce47a02a1f9a4dd076e037e4760d2f148a5ab811e67d0ffe2daac0e99
SSDEEP
6144:VolB4dAFr76VCzjTZfaqhZZrR/EO73TYp+tavTTBk2uv/ieze6MVwAINY5nq:VsBV6VU1prR/L8TTO2uv/JDMFq
Checks for missing Authenticode signature.
resource |
---|
71ade47c69ee81fd17422b485debcaea |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrCmpIW
UrlEscapeW
UrlGetPartW
StrStrIW
PathMatchSpecW
UrlUnescapeW
HttpOpenRequestW
InternetCloseHandle
InternetReadFile
InternetQueryOptionW
HttpQueryInfoW
InternetSetCookieW
InternetOpenW
InternetSetOptionW
HttpSendRequestW
InternetCrackUrlW
InternetConnectW
SetEndOfFile
CreateFileA
GetModuleHandleA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
IsValidCodePage
GetOEMCP
GetACP
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
HeapSize
GetProcessHeap
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
GetFullPathNameW
GetTempFileNameW
GetFileSize
MapViewOfFile
UnmapViewOfFile
VirtualQuery
CreateFileW
LocalAlloc
CreateFileMappingW
CloseHandle
LocalFree
WaitForSingleObject
TerminateThread
Sleep
SetThreadPriority
GetExitCodeThread
FreeLibrary
WriteFile
GetProcAddress
LoadLibraryA
DeleteFileW
WideCharToMultiByte
lstrlenW
GetTempPathW
GetSystemInfo
GetWindowsDirectoryW
GetVolumeInformationW
CreateMutexW
CreateProcessW
GetTickCount
ReleaseMutex
GetSystemTime
MoveFileExW
SetEnvironmentVariableA
HeapAlloc
GetModuleFileNameW
MultiByteToWideChar
SetLastError
lstrcmpW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
RaiseException
FindFirstFileW
InterlockedDecrement
InterlockedIncrement
GetDriveTypeA
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
wsprintfW
SetWindowTextW
SetWindowPos
CallWindowProcW
SetWindowLongW
SendMessageW
GetWindowTextW
RealGetWindowClassW
EnumChildWindows
GetWindowLongW
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
VariantChangeType
VariantCopy
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantInit
VariantClear
inet_addr
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
RpcStringFreeW
UuidToStringW
UrlMkGetSessionOption
MapAndLoad
UnMapAndLoad
CryptGetHashParam
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptCreateHash
CryptEncrypt
CryptDeriveKey
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
CryptHashData
SHCreateDirectoryExW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ