ServiceMain
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
a40b2a9a186982c6b56fa4fa8acfc76b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a40b2a9a186982c6b56fa4fa8acfc76b.dll
Resource
win10v2004-20240221-en
Target
a40b2a9a186982c6b56fa4fa8acfc76b
Size
125KB
MD5
a40b2a9a186982c6b56fa4fa8acfc76b
SHA1
d3b751e67c9dfe3e6782404adafe9b04af9a84c5
SHA256
15de92a7f06fbc5ca6375e237d880a5beb1616ba62b37d0426a16f3f87086d00
SHA512
9f83a954157c86dc41c7474b834f09c530eaee05d9711e2441c34979a6ca7c0f86f07cc0f0338de97df7a78f509cab31bbb64dc26510195e20eccb4072916432
SSDEEP
1536:AtWpC3yXZ+I/5LFF6ziEmjkYiUraU6IfFj61sVVkeoTHEMsaxc7u5pjAuAlzu:A8s3yJB/xFMihpiUra4qSkeoqS15i5z
Checks for missing Authenticode signature.
resource |
---|
a40b2a9a186982c6b56fa4fa8acfc76b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_except_handler3
swprintf
MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
GetCalendarInfoW
LocalFileTimeToFileTime
VirtualAlloc
CompareStringW
GetLocaleInfoW
GetDateFormatW
FileTimeToSystemTime
HeapFree
GetACP
lstrcmpiW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
LocalFree
GlobalFree
GlobalAlloc
GetFileAttributesW
LocalAlloc
GetProcessHeap
HeapAlloc
VirtualProtect
LoadLibraryW
GetModuleFileNameW
GetWindowsDirectoryW
GetModuleHandleW
GetProcAddress
CreateSolidBrush
SetBkColor
SetTextColor
DeleteObject
SetFocus
GetSysColor
PostMessageW
GetDlgItem
WinHelpW
GetWindowLongW
ShowWindow
GetClientRect
EnableWindow
GetSystemMetrics
IsWindowEnabled
LoadIconW
IsCharAlphaW
SendDlgItemMessageW
GetParent
SendMessageW
GetFocus
MessageBoxW
IsCharAlphaNumericW
LoadStringW
wsprintfW
SetWindowLongW
PathFindFileNameW
StrCatW
ord182
DragQueryFileW
CoInitialize
CoUninitialize
PropVariantCopy
ReleaseStgMedium
PropVariantClear
FreePropVariantArray
CoTaskMemFree
StgOpenStorageEx
CoTaskMemAlloc
ServiceMain
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ