DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
87bb64a1dc785638487845f22ee05c66.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
87bb64a1dc785638487845f22ee05c66.dll
Resource
win10v2004-20231222-en
Target
87bb64a1dc785638487845f22ee05c66
Size
60KB
MD5
87bb64a1dc785638487845f22ee05c66
SHA1
029af269ec7b336d945e1ac34b5b6275d553d9cb
SHA256
afeb15b3fe43016494876edf1ef7c720e66b50a6b1e6eec0165c27f570074a9b
SHA512
576378687d40c41e76bcf9cd26ffde930c049315950caff5a23f046c197a53dc28f2e398618d79a0e86626b5c3e9f273ebdc06cd24d61de3bc74ed5b52c33d77
SSDEEP
1536:3UhCHjxMfezUFDSeA0Vy47ZLBVkJCZK6x7MQ:3UhCHjx4rFDJAH41CCpxQ
Checks for missing Authenticode signature.
resource |
---|
87bb64a1dc785638487845f22ee05c66 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathFileExistsA
PathFileExistsW
HttpSendRequestA
GetCurrentThreadId
CloseHandle
GetFileSize
CreateFileA
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
GetSystemDirectoryA
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringW
WriteFile
CreateFileW
GetSystemDirectoryW
GetProcAddress
LoadLibraryA
CreateThread
GetModuleHandleA
DeleteFileW
CreateProcessA
GetWindowsDirectoryA
MoveFileA
GetLocaleInfoA
GetSystemDefaultLCID
GetVersionExA
GetLastError
CreateMutexA
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualProtect
VirtualQuery
GetCurrentProcess
DispatchMessageA
TranslateMessage
GetMessageA
PostThreadMessageA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoTaskMemFree
StringFromCLSID
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocStringLen
VariantClear
SysAllocString
SysStringLen
SysFreeString
VariantInit
_unlink
srand
rand
tmpnam
free
wcscmp
time
strtok
rewind
wcsstr
wcscat
swprintf
fread
_wcsicmp
wcslen
fopen
fprintf
fwrite
fflush
fclose
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
div
malloc
sscanf
GetModuleInformation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ