DllGetClassObject
DllRegisterServer
DllUnregisterServer
GoService
Behavioral task
behavioral1
Sample
72a5d092614b8ab12e54204302d8ac25.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72a5d092614b8ab12e54204302d8ac25.dll
Resource
win10v2004-20231222-en
Target
72a5d092614b8ab12e54204302d8ac25
Size
45KB
MD5
72a5d092614b8ab12e54204302d8ac25
SHA1
9a54d2c9c1cde075bd6dd2e67bee3a7f12c9fd32
SHA256
6715e1dff7fe548fdb9a20a05f665eb72ef9cdbf3ac106682c4a02484731ca37
SHA512
c7d77efa1544137272b2cea3693901b7beb3cdba1cde5dab4c9e294b7a987c5bd3b5bc55f290461d4f31a88bbf11d0c48a2b760286483ed3c5138e7b84ef616c
SSDEEP
768:JtKcFSvjdNCoeCAau6lU0cdET7ZHAMT2es7:JwLNCDeSdEnJLs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
72a5d092614b8ab12e54204302d8ac25 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
LocalFree
ReadFile
GetFileSize
GetLastError
CreateFileA
WriteFile
lstrcatA
lstrcpyA
InterlockedDecrement
lstrcmpA
ExitProcess
DeleteFileA
GetSystemDirectoryA
CreateThread
TerminateThread
DisableThreadLibraryCalls
GetModuleFileNameA
FindNextFileA
FindFirstFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
OutputDebugStringA
WideCharToMultiByte
lstrlenA
InterlockedIncrement
MultiByteToWideChar
GetWindowsDirectoryA
GetVersionExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
strrchr
atol
strstr
memcmp
time
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
wcslen
__CxxFrameHandler
_CxxThrowException
memset
strncmp
ShellExecuteA
DialogBoxParamA
ShowWindow
CharUpperBuffA
SetWindowLongA
EndDialog
GetWindowLongA
MoveWindow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GoService
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE