DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
9bda71055be1d2813b4eb5fb24420c66.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9bda71055be1d2813b4eb5fb24420c66.dll
Resource
win10v2004-20231215-en
Target
9bda71055be1d2813b4eb5fb24420c66
Size
39KB
MD5
9bda71055be1d2813b4eb5fb24420c66
SHA1
db79186de98cf23be8d7624e80e9c83c4e50a02d
SHA256
6ce2e77f93bd9133e50715c105ecf11898690ebd69cc8122ccad674b364c6b1d
SHA512
9b08267a59eb8c114fa05733ac75ea53019a13712b03c30677e64ade2b990ae826365a384bcded636865da3f512b3b472c989d7943be17aa33c8aea0ba040b5a
SSDEEP
384:rjMq1krBa1ZrVPpw2LA8P27BiQSWNtpWEa0AV3FRWVIV6q31al:rjmBa1ZrVm2LAfZPtPaHR1VdI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9bda71055be1d2813b4eb5fb24420c66 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
CloseHandle
ReleaseMutex
GetTickCount
InterlockedDecrement
GetTimeZoneInformation
GetLocalTime
GetWindowsDirectoryA
CreateMutexA
DeleteFileA
HeapReAlloc
HeapFree
GetProcessHeap
CreateProcessA
CompareStringA
SetEndOfFile
WriteFile
SetFilePointer
CreateFileA
DebugBreak
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
GetVersionExA
GetSystemInfo
HeapAlloc
GetThreadLocale
DisableThreadLibraryCalls
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
SHDeleteKeyA
CharNextA
wsprintfA
InternetReadFile
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
HttpQueryInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE