DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ad269c3d838f706adfcfbcb2ecf2810c.dll
Resource
win7-20240221-en
Target
ad269c3d838f706adfcfbcb2ecf2810c
Size
60KB
MD5
ad269c3d838f706adfcfbcb2ecf2810c
SHA1
f46ac1d6f8154ff3e76abfff8c629c814e818fb3
SHA256
e02f322ba658156a4aaa99444a283c3dc94e622be77c3939f798a898e6e0da09
SHA512
905723ce02f7f4495ce63aab8ec9dfe0036da07f58a3da7e01abb580935f1bbe738bb675bba303880548e2b0369a2ca078ebcc62af3bd6ac978914860c41545d
SSDEEP
768:jB2FCGPRkalzZUMNYhVMeaNpz8hJoi+wcjtBW/CNVITtD3cs/DvckaJd0m:aukrTROrD+wgBWaNVWn4kaJd0
Checks for missing Authenticode signature.
resource |
---|
ad269c3d838f706adfcfbcb2ecf2810c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
MoveFileA
SetFileAttributesA
WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
lstrlenA
CreateDirectoryA
GetCurrentProcessId
CloseHandle
Process32Next
Process32First
WritePrivateProfileStringA
GetCommandLineW
Sleep
GetSystemDirectoryA
ExitProcess
GetExitCodeProcess
WaitForSingleObject
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CreateThread
LoadLibraryA
FreeLibrary
DeleteFileA
RemoveDirectoryA
LocalFree
CreateProcessA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
_purecall
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
_wcslwr
wcsstr
strcmp
fopen
fseek
ftell
fread
memset
strcat
strcpy
sprintf
_access
strstr
atoi
strchr
??3@YAXPAX@Z
memcpy
_strupr
??2@YAPAXI@Z
memcmp
strlen
strrchr
fclose
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ