DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnableRunDLL32
ReturnDLLName
ReturnDLLVersion
Behavioral task
behavioral1
Sample
8bdd17a61672bc898e7874ee09706c86.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8bdd17a61672bc898e7874ee09706c86.dll
Resource
win10v2004-20231215-en
Target
8bdd17a61672bc898e7874ee09706c86
Size
210KB
MD5
8bdd17a61672bc898e7874ee09706c86
SHA1
79b235976e6df7088e9178cfb91de476d332d164
SHA256
716b9abfd29b431a91c4f6c22e3e7b61cea9db16409b61902d2ed66a59043a98
SHA512
87a3037f36534d9b574294a970f05156721268033557cb908f114984e8f9034371843acecb1ead58fd9986f290e62af79e7b167fa330c447c3961368748e27da
SSDEEP
3072:sVVfg9sJVpcmj8T19OwOd/xQVFu+TlfpwTlRKx2E5ERq:afYsV38nf/Tlfp6LA/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8bdd17a61672bc898e7874ee09706c86 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalUnlock
GlobalLock
GlobalAlloc
TerminateThread
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WideCharToMultiByte
lstrlenW
GetVersionExA
lstrcmpA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
MultiByteToWideChar
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
GetModuleHandleA
HeapCreate
GetEnvironmentVariableA
SetUnhandledExceptionFilter
SetEndOfFile
SetFilePointer
GetStartupInfoA
GetStdHandle
SetHandleCount
SetStdHandle
TlsGetValue
SetLastError
TlsFree
TlsAlloc
HeapSize
TerminateProcess
CompareStringW
CompareStringA
GetCPInfo
LCMapStringW
LCMapStringA
ExitProcess
GetVersion
GetCommandLineA
HeapReAlloc
ExitThread
TlsSetValue
CreateThread
ResumeThread
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
Sleep
GetLocaleInfoA
MoveFileExA
WritePrivateProfileStringA
WriteFile
OpenFile
FormatMessageA
LocalFree
CreateFileA
GetFileSize
ReadFile
SetEnvironmentVariableA
CloseHandle
GetLastError
InterlockedIncrement
GetShortPathNameA
lstrlenA
GetModuleFileNameA
InterlockedDecrement
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
GetACP
GetOEMCP
GetLocaleInfoW
HeapFree
HeapAlloc
RtlUnwind
RaiseException
GetFileType
GetLocalTime
GetSystemTime
GetTimeZoneInformation
InterlockedExchange
VirtualFree
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
CryptImportKey
CryptReleaseContext
CryptAcquireContextA
CryptDecrypt
CryptDestroyKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Destroy
GetObjectA
GetDeviceCaps
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
GetStockObject
CLSIDFromString
CLSIDFromProgID
StringFromCLSID
OleUninitialize
OleInitialize
CoCreateGuid
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
OleLockRunning
UuidToStringA
RpcStringFreeA
URLDownloadToFileA
wsprintfA
GetKeyboardLayoutNameA
SendMessageA
DefWindowProcA
RegisterClassExA
LoadCursorA
GetClassInfoExA
RegisterWindowMessageA
GetWindow
SetWindowLongA
SetWindowTextA
ShowWindow
CreateWindowExA
GetClassNameA
GetDlgItem
DestroyWindow
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
CreateAcceleratorTableA
GetParent
GetDC
GetDesktopWindow
ReleaseDC
RedrawWindow
SetWindowPos
BeginPaint
GetClientRect
FillRect
EndPaint
CallWindowProcA
GetFocus
IsChild
SetFocus
GetSysColor
IsWindow
DestroyMenu
CharNextA
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
InternetOpenA
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetGetLastResponseInfoA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnableRunDLL32
ReturnDLLName
ReturnDLLVersion
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE