COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
7c0946b24f1f5a002a3b416630d5f4ca.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c0946b24f1f5a002a3b416630d5f4ca.dll
Resource
win10v2004-20231215-en
Target
7c0946b24f1f5a002a3b416630d5f4ca
Size
36KB
MD5
7c0946b24f1f5a002a3b416630d5f4ca
SHA1
fa86789f7db43223d089c1c310f087c55ec3491d
SHA256
0725f1fe37ab35bbe3d277f6ffc1f102aa47fc4bcb511d14d36b3acb8ad7b878
SHA512
3b98a74226721189bbd6afe7ceafd01b79cd1ce799ac55b6925fd55c9e242a2d083893341100fdcec6cc284a127bdd922816c68a2358cfcb0b5d615dfad0d9d5
SSDEEP
768:7Vs14yYwC2+s/X28WIS1tn7/J3MsoG95hNDdR0VOMP:7uOyYwC428WISX71MOvRR0VOMP
Checks for missing Authenticode signature.
resource |
---|
7c0946b24f1f5a002a3b416630d5f4ca |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
CreateThread
SetFileAttributesA
GetCommandLineA
GetSystemDirectoryA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetModuleHandleA
Sleep
ExitProcess
IsBadReadPtr
GetParent
GetWindowThreadProcessId
ReleaseDC
FindWindowA
wsprintfA
GetWindowTextA
GetWindowRect
GetDC
GetDesktopWindow
GetClientRect
CallWindowProcA
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipLoadImageFromFile
GdipDisposeImage
GdiplusShutdown
GdipSaveImageToFile
GdiplusStartup
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
WSAStartup
send
recv
socket
inet_addr
htons
connect
gethostbyname
inet_ntoa
closesocket
WSACleanup
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
_access
strrchr
strchr
strncpy
abs
malloc
wcscmp
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strupr
_strlwr
_getpid
_stricmp
_strrev
??2@YAPAXI@Z
__CxxFrameHandler
strstr
memcpy
strncmp
strcat
atoi
sprintf
strlen
strcmp
strcpy
memset
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ