DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
iedisco
Behavioral task
behavioral1
Sample
7502c51fe39a1235cf78293924d164d1.dll
Resource
win7-20231215-en
Target
7502c51fe39a1235cf78293924d164d1
Size
261KB
MD5
7502c51fe39a1235cf78293924d164d1
SHA1
bbeaeab8ca553ae0d5b7e18788989f53a1339cf9
SHA256
ca8037eac6178485e8d8615aa4adf2046375d8c47869647a4f7a2977055931c4
SHA512
136995e2ab2f197b938940cdb519c715221739008a2d1ca5a48f898324fe2b9ffbf2815b48901cb3f46d3fabb253116199c2d5653ebd680553a6c10d3cd9c631
SSDEEP
3072:EXCpQIg4lC6msvBlenXv2JwmdMNdSdEnhhc+3+:EXr/si/aShc+3+
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
7502c51fe39a1235cf78293924d164d1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
lstrlenA
WideCharToMultiByte
LocalFree
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetModuleFileNameA
lstrcmpiA
DisableThreadLibraryCalls
DeleteFileA
CloseHandle
TerminateThread
HeapAlloc
GetSystemInfo
GetShortPathNameA
lstrcmpA
HeapDestroy
OutputDebugStringA
CreateThread
Sleep
GetTickCount
lstrcpyA
lstrcatA
MultiByteToWideChar
SetFileTime
SystemTimeToFileTime
GetSystemTime
CreateFileA
CopyFileA
GetSystemDirectoryA
CreateProcessA
GetWindowsDirectoryA
OutputDebugStringW
GetLastError
FindNextFileA
FindFirstFileA
WaitForSingleObject
WriteFile
ReadFile
GetFileSize
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
GlobalFree
GlobalAlloc
CreateDirectoryA
TerminateProcess
OpenProcess
GetVersionExA
HeapCreate
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
GetDIBits
GetObjectA
SetBkColor
SetMapMode
SetTextColor
CreateSolidBrush
DeleteObject
SetWindowExtEx
SetViewportExtEx
rand
_initterm
_onexit
free
realloc
pow
strrchr
fopen
strchr
fclose
time
fwrite
abs
atof
atol
memcmp
strstr
_mbscmp
atoi
_ftol
_ismbcdigit
_mbsnbcmp
sprintf
strlen
_mbclen
vsprintf
_mbsrchr
_mbsstr
memmove
_mbsinc
memset
_mbslwr
_mbschr
wcslen
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
srand
_CxxThrowException
__dllonexit
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoUninitialize
CoInitialize
StringFromCLSID
CoTaskMemFree
ShellExecuteA
URLDownloadToFileA
KillTimer
LoadStringA
DialogBoxParamA
SetTimer
OpenClipboard
GetClipboardData
CloseClipboard
GetOpenClipboardWindow
GetDC
CopyIcon
PeekMessageA
TranslateMessage
DispatchMessageA
CloseWindow
SetSystemCursor
CharUpperBuffA
LoadCursorA
CopyImage
CharLowerBuffA
GetForegroundWindow
EndDialog
GetSystemMetrics
GetDlgItemTextA
SetDlgItemTextA
GetClientRect
FillRect
EnumWindows
GetClassNameA
SetWindowsHookExA
UnhookWindowsHookEx
PostMessageA
GetWindowTextA
CallNextHookEx
FindWindowA
GetWindowRect
GetDesktopWindow
GetWindowLongA
SetWindowPos
MoveWindow
GetDlgItem
SetWindowLongA
ShowWindow
SetWindowTextA
EnableWindow
MessageBoxA
SendMessageA
SetForegroundWindow
InternetCanonicalizeUrlA
GetUrlCacheEntryInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
iedisco
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE