DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a1b77272ece546f404b56fb9901acda8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1b77272ece546f404b56fb9901acda8.dll
Resource
win10v2004-20240221-en
Target
a1b77272ece546f404b56fb9901acda8
Size
48KB
MD5
a1b77272ece546f404b56fb9901acda8
SHA1
9082c237f07fd7559b986126114142ae23cf190e
SHA256
7de7f8e84563bdb9bfe380bb252ab8f60e086faace97b5f62b1dd4b5ab0d0184
SHA512
0f1f0706c135edeeb7941bf2c589ae780f9155a23f1ad46cfaca9e536f26e45e38bf278a466302aa9916ad32a86650b7e6024d697ba6859f8ce6838a72b87577
SSDEEP
768:tGj3rMCQtuIGAXTNQ1iIv5jvHwfZXvmJ5e5HDNhuDu65FdjR62QPBao82:VtuIlNS9vHmxJ5jzeXFZR6z
Checks for missing Authenticode signature.
resource |
---|
a1b77272ece546f404b56fb9901acda8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
Process32Next
Process32First
Sleep
CreateThread
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
GetSystemDirectoryA
GetLocalTime
GetLastError
CreateEventA
GetWindowsDirectoryA
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
InterlockedIncrement
GetCurrentProcessId
WritePrivateProfileStringA
DeleteFileA
GetModuleFileNameA
LoadLibraryA
GetCommandLineW
GetProcAddress
FindWindowExA
PostMessageA
IsWindow
KillTimer
SetTimer
SetWindowTextA
SendMessageA
CreateWindowExA
ShowWindow
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
RegisterClassExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_purecall
strchr
_strlwr
fopen
fwrite
fclose
strcmp
free
_initterm
malloc
_adjust_fdiv
_stricmp
memcmp
strstr
strcpy
strcat
rand
memcpy
sprintf
_access
memset
strrchr
strlen
??2@YAPAXI@Z
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ