DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
72a3120374f26e511e84fcb449c86245.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72a3120374f26e511e84fcb449c86245.dll
Resource
win10v2004-20231222-en
Target
72a3120374f26e511e84fcb449c86245
Size
47KB
MD5
72a3120374f26e511e84fcb449c86245
SHA1
37fd1271989a653e742480103935fb14997755c9
SHA256
1acdc67e8b59aca9eecbcf8212bf21759bf368a802bb82309016ebb0b95342e3
SHA512
2b54cec95eaab6f6085da7f57ee0f00c92f229b1397148f62bb8f2e2cf0ef1234490075113283f4e68355c1e436c218567ce44699544fea09512d40a91d04836
SSDEEP
768:gJXjwDopnKR+RpkDnezXfDtKCORq3PImEKt7/:aXj/VWDebLtKCORwPImEKt7/
Checks for missing Authenticode signature.
resource |
---|
72a3120374f26e511e84fcb449c86245 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ioctlsocket
socket
htons
connect
recv
closesocket
send
WSAStartup
gethostbyname
LocalFree
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
GetModuleHandleA
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
lstrcpynA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CallNextHookEx
wsprintfA
GetWindowTextA
GetParent
GetClassNameA
ScreenToClient
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_initterm
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
atoi
free
isalpha
isdigit
realloc
malloc
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ