DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
88e281239bfda9665254c21c6c0fa561.dll
Resource
win7-20231215-en
Target
88e281239bfda9665254c21c6c0fa561
Size
72KB
MD5
88e281239bfda9665254c21c6c0fa561
SHA1
28227aa4dda93c943b8e30b76f039810d0577e3b
SHA256
071be50384c8ad9ed741aab4bea49c9437d2308ca74092be7acac8fabe4ff3b7
SHA512
3e88f0558b5af00785fea8e175c363c213b12eeaacbbed84f46c67fcbf1116799b543239744052224e2a862620b80d615404096c8c3a880a9c8a3610c9378f0b
SSDEEP
1536:ueTKpLajammpYXt0HUw8q+diM82034/06LCUHx6e9:3ALasYXMKqQT82zLC8
Checks for missing Authenticode signature.
resource |
---|
88e281239bfda9665254c21c6c0fa561 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
LoadLibraryA
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
ExitProcess
Sleep
RemoveDirectoryA
lstrlenA
GetCommandLineW
CreateDirectoryA
GetProcAddress
MoveFileA
Process32Next
Process32First
CreateThread
GetCurrentProcessId
WritePrivateProfileStringA
MultiByteToWideChar
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LocalFree
lstrlenW
WideCharToMultiByte
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
memcmp
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
strcmp
strncmp
strchr
strncpy
fopen
fseek
ftell
fread
strstr
memset
strrchr
sprintf
strcat
strlen
??3@YAXPAX@Z
memcpy
_purecall
??2@YAPAXI@Z
_stricmp
strcpy
_access
wcsstr
_wcslwr
fclose
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ