DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7e8a684b719e01ee28c6abca00d6481c.dll
Resource
win7-20231215-en
Target
7e8a684b719e01ee28c6abca00d6481c
Size
72KB
MD5
7e8a684b719e01ee28c6abca00d6481c
SHA1
966365e07c29e587faefcee07949dd60be2ad628
SHA256
206be99a734bbf945861b806795861e2b0b24ef8d8324e626584f8de7c268b6a
SHA512
0c1f1e1004876b720253e57af9c51c1d5c64f54787ee21665dfee4ffa9602d6005f182b3b7142324f6718ae7295f207c3d186283412c1c93d3ebb87f8f9ff377
SSDEEP
1536:A4OjFofpqCCpqshETuY2z+3LlkErNLFUZq:ugCMn8K7lNrNLIq
Checks for missing Authenticode signature.
resource |
---|
7e8a684b719e01ee28c6abca00d6481c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WritePrivateProfileStringA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CloseHandle
Process32Next
CreateDirectoryA
GetCurrentProcessId
FreeLibrary
LoadLibraryA
GetCommandLineW
GetProcAddress
Sleep
CreateProcessA
RemoveDirectoryA
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateThread
MoveFileA
GetModuleFileNameA
WideCharToMultiByte
lstrlenW
lstrlenA
MultiByteToWideChar
ExitProcess
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
LocalFree
SetFileAttributesA
Process32First
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_access
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strcmp
_wcslwr
wcsstr
strncmp
atoi
strchr
??3@YAXPAX@Z
strstr
strrchr
sprintf
memcmp
memcpy
??2@YAPAXI@Z
strlen
_strupr
strcat
memset
_purecall
strcpy
strncpy
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ