DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
install
uninstall
Static task
static1
Behavioral task
behavioral1
Sample
7d6066917c81ff22a89901298a4cdf3d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d6066917c81ff22a89901298a4cdf3d.dll
Resource
win10v2004-20231215-en
Target
7d6066917c81ff22a89901298a4cdf3d
Size
356KB
MD5
7d6066917c81ff22a89901298a4cdf3d
SHA1
e69e384679fd51da634097f596ec393da0b49e18
SHA256
e61b0af971c29c59f677e434afaaf29edb2e4573ae05a52a83abd20d562940ca
SHA512
9cb207f853acce2736338378042563fc325dcf8b25184602a8716e78b9a2735ab51c42a749badedfbcd9253f322272c54ebd1e6ba270d9d689ab1564a58d5c6e
SSDEEP
6144:4iG4vu8ZPXk1YOWkHwzU9qUTCmyQQEsC+SWQeOOSxp6piG4vu8ZPXkbA9R9:y4lxTOWiUU9q1hbV4lxpP
Checks for missing Authenticode signature.
resource |
---|
7d6066917c81ff22a89901298a4cdf3d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
SetFileAttributesA
GetFileAttributesA
lstrlenW
lstrlenA
DeleteFileA
ExitProcess
Sleep
CopyFileA
GetCurrentProcessId
CreateMutexA
OpenMutexA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetModuleFileNameA
GetTickCount
CreateRemoteThread
GetModuleHandleA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
ResumeThread
HeapFree
HeapAlloc
GetProcessHeap
GetCommandLineA
LockResource
FreeResource
OpenProcess
SizeofResource
FindResourceA
LoadLibraryExA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
FindClose
FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
CreateToolhelp32Snapshot
Process32Next
Process32First
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RaiseException
GetConsoleMode
GetConsoleCP
GetThreadLocale
InterlockedExchange
InitializeCriticalSection
GetCurrentProcess
DuplicateHandle
GetLastError
LocalFree
SetLastError
GetFileSize
SetFilePointer
ReadFile
CreateFileA
WriteFile
LoadResource
CloseHandle
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsFree
HeapReAlloc
RtlUnwind
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
PostMessageA
FindWindowExA
UnhookWinEvent
FindWindowA
GetWindowTextA
RegisterClassExA
CreateWindowExA
SetTimer
ShowWindow
DefWindowProcA
SetWinEventHook
GetMessageA
DispatchMessageA
TranslateMessage
SetWindowPos
SetWindowLongA
GetDesktopWindow
EnumChildWindows
SendMessageA
KillTimer
GetClassNameA
LookupAccountSidA
OpenProcessToken
GetTokenInformation
LookupPrivilegeValueA
AdjustTokenPrivileges
SetEntriesInAclA
SetSecurityInfo
SHGetSpecialFolderLocation
CommandLineToArgvW
SHChangeNotify
SHGetSpecialFolderPathA
SHGetPathFromIDListA
CoCreateInstance
CoUninitialize
CoInitialize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
install
uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ