DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
aa0d3d05220a2d020da4455fcb26ba5b.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
aa0d3d05220a2d020da4455fcb26ba5b.dll
Resource
win10v2004-20240226-en
Target
aa0d3d05220a2d020da4455fcb26ba5b
Size
68KB
MD5
aa0d3d05220a2d020da4455fcb26ba5b
SHA1
19c2754265c5159bf6a83f640333a73c3db0ecab
SHA256
0974ab050fbd10eb80d9f8a0acfa4d26a116938f8dc02bb51773f1df9605b7b7
SHA512
47e24d5f3293b05b84f5ea8dc2c16506f001f5e5242f5a3fe6db27d89486dcba92a76a1fe411d940b1982e915b7062f916f0f427ddbfedc568eb58c0da3c38ab
SSDEEP
768:vCu5Oy9dZRtnyPEYnnQxQYAWLT52hWolTDqyjWk1FyXZciRUuGAbxXVqBZ66rY:vlMqdCQOWZWWoFqKFwZcE5w6V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa0d3d05220a2d020da4455fcb26ba5b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
MultiByteToWideChar
DisableThreadLibraryCalls
GetSystemInfo
HeapCreate
WideCharToMultiByte
lstrlenW
GetModuleFileNameA
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
GetShortPathNameA
SizeofResource
LoadResource
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcatA
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrlenA
FindResourceA
IsDBCSLeadByte
LockResource
DebugBreak
CreateFileA
WriteFile
LeaveCriticalSection
InitializeCriticalSection
SetEndOfFile
CreateProcessA
HeapAlloc
HeapReAlloc
HeapFree
GetLastError
CloseHandle
GetVersionExA
lstrcpyA
GetTempFileNameA
GetTempPathA
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
LPtoDP
CreateDCA
GetDeviceCaps
SetMapMode
DeleteDC
SetViewportOrgEx
RestoreDC
SaveDC
SetWindowOrgEx
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
ShellExecuteA
IsChild
GetFocus
GetClassInfoExA
GetWindowLongA
CreateWindowExA
CallWindowProcA
EndPaint
SetWindowLongA
DestroyWindow
BeginPaint
GetClientRect
RegisterClassExA
GetDC
ReleaseDC
wsprintfA
LoadCursorA
CharNextA
DefWindowProcA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE