DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
762acfc66520166ce73b2ec73e014667.dll
Resource
win7-20231215-en
Target
762acfc66520166ce73b2ec73e014667
Size
68KB
MD5
762acfc66520166ce73b2ec73e014667
SHA1
5128b776dd1e6c7f8237f0c7eaf24b598d025b04
SHA256
71f48d622df207b9c0b2157b921e01b6b88c4128a0eae55bc5d88beb1e3774a5
SHA512
d4909b1fd40f6b5809c42fa256bd55180fb1b1728f2445b308d194b9e74fe63fee1fbf61fac35935ad5e8001541ec1d6d7697d0063408efdc50e0b3ef267112d
SSDEEP
1536:4W3HpJ6xlIaoEcgvehWITY29WNA4gM/7Psh:wxByTZsh7kh
Checks for missing Authenticode signature.
resource |
---|
762acfc66520166ce73b2ec73e014667 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
Sleep
LocalFree
GetCommandLineW
CreateThread
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
GetExitCodeProcess
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
RemoveDirectoryA
MoveFileA
SetFileAttributesA
WritePrivateProfileStringA
Process32Next
Process32First
GetCurrentProcessId
ExitProcess
CloseHandle
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
CreateDirectoryA
FindNextFileA
DeleteCriticalSection
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strlen
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
fopen
fseek
ftell
fread
fclose
memcpy
strncmp
strncpy
wcsstr
_wcslwr
??3@YAXPAX@Z
_access
strcat
strstr
strrchr
sprintf
memcmp
memset
_strupr
strcpy
??2@YAPAXI@Z
strcmp
atoi
strchr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ