DllRegisterServer
DllUnregisterServer
onLogon
Static task
static1
Behavioral task
behavioral1
Sample
7e2bee1aef75af92daaac01d4cfee7e5.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7e2bee1aef75af92daaac01d4cfee7e5.dll
Resource
win10v2004-20231222-en
Target
7e2bee1aef75af92daaac01d4cfee7e5
Size
9KB
MD5
7e2bee1aef75af92daaac01d4cfee7e5
SHA1
b252babfaf24824e132b32683ae548be9dd69a36
SHA256
e1aaba5d75b2ace11713679e557ca0c67bf2586fa2a75bff4cfab4f8fc9b3d6a
SHA512
1a9407be6660a30e9ca9aa94a9090122e022b02113decf7dea578b3cb5a5694a329c9f63d2349c1f691e2a36e86bc27f7a3041d5326c194086f79993c9f68149
SSDEEP
192:c1OMn3ROZfm0Fy16ZlRWh8yDRJasyTAzJf:cXn3Rn0o16Zl0h8ydIQJf
Checks for missing Authenticode signature.
resource |
---|
7e2bee1aef75af92daaac01d4cfee7e5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
lstrlenA
GetTickCount
GetSystemDirectoryA
FindFirstFileA
GetLastError
lstrcmpiA
GetModuleHandleA
FindClose
MoveFileA
GetModuleFileNameA
FindNextFileA
DeleteFileA
VirtualProtect
IsBadReadPtr
CopyFileA
VirtualQuery
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
GetForegroundWindow
MessageBoxA
GetSystemMetrics
PathAddBackslashA
PathAppendA
PathRemoveFileSpecA
PathStripPathA
ShellExecuteA
_vsnprintf
memset
_strcmpi
_stricmp
DllRegisterServer
DllUnregisterServer
onLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ