DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
79206cbb320cdf6c01cf3c3aef610920.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79206cbb320cdf6c01cf3c3aef610920.dll
Resource
win10v2004-20231222-en
Target
79206cbb320cdf6c01cf3c3aef610920
Size
40KB
MD5
79206cbb320cdf6c01cf3c3aef610920
SHA1
fd471994182469e16d33830f3c62350f473714fe
SHA256
bce594aa2e39a6d98c53bc28ced3ff90e64a8449f606c4ed57991f872c1f73a4
SHA512
9bf65f03761050d69fc9bc6be4b7690f25377fbb2dedac218d89791a025be31d0ffbb0fb4d5805e61e55dbf8114b45dec99194934ee615e60e5cde77428a19e2
SSDEEP
384:N9M4dtbIQamXzvtAUf0vZZvuwqtHmSOGrFAZYndcKWWf6Wl:ddBIQamXzvtALvmwqtHmZaaYdca
Checks for missing Authenticode signature.
resource |
---|
79206cbb320cdf6c01cf3c3aef610920 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
DisableThreadLibraryCalls
CreateFileA
Sleep
CloseHandle
DeviceIoControl
LoadLibraryA
InterlockedIncrement
FreeLibrary
GetLastError
CreateMutexA
CreateProcessA
DeleteFileA
WinExec
GetProcAddress
IsBadStringPtrA
FindFirstFileA
FindClose
MoveFileA
CopyFileA
GetTempFileNameA
GetPrivateProfileStringA
GetTempPathA
DefWindowProcA
SetTimer
KillTimer
DispatchMessageA
wsprintfA
SetWindowsHookExA
CallNextHookEx
FindWindowExA
PostMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
UnhookWindowsHookEx
CoInitialize
CoCreateGuid
CoUninitialize
SHDeleteKeyA
SHDeleteValueA
SHGetValueA
PathFileExistsA
SHSetValueA
strrchr
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
time
_except_handler3
_beginthreadex
_strlwr
_stricmp
??3@YAXPAX@Z
_snprintf
strchr
sprintf
fopen
fseek
ftell
fclose
fread
??2@YAPAXI@Z
fwrite
SetupIterateCabinetA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ