DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
78448eee7b17027230c9824f1a0a540f.dll
Resource
win7-20231215-en
Target
78448eee7b17027230c9824f1a0a540f
Size
60KB
MD5
78448eee7b17027230c9824f1a0a540f
SHA1
0193711c43376c4aaad8c8965d3f26295ab787ab
SHA256
e8b0307e3be6a8cc4018b06ad397a6b5cea50adfe47f7ed11dc506e8eeedf14d
SHA512
b1bcde9cafb33e212390d6d1384176e32a6e9004fdc5a32c701a9f36f670aee1491f5646588568d8b046e3e0cf69b115f8a0f18304dc324891906ba48dbd90d9
SSDEEP
768:/ANfQ8MXQSlyt7rlq2F1yMUuibZqbVXy9tDzD49VOlj5HIqgQ5Qi/OEeiHy:/CfGk/UxgtLOldxgQn/OEei
Checks for missing Authenticode signature.
resource |
---|
78448eee7b17027230c9824f1a0a540f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
WideCharToMultiByte
lstrlenW
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
MoveFileA
CreateDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
MultiByteToWideChar
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
LocalFree
CreateThread
GetCurrentProcessId
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetCommandLineW
Process32First
Process32Next
CloseHandle
SetFileAttributesA
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
Sleep
CreateProcessA
InterlockedDecrement
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
GetNamedSecurityInfoA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strlen
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
memcpy
strncmp
strncpy
??3@YAXPAX@Z
strcat
strcpy
memset
sprintf
_access
strstr
??2@YAPAXI@Z
strcmp
strrchr
_stricmp
wcsstr
_wcslwr
memcmp
atoi
strchr
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ