CloseWbemTextSource
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenWbemTextSource
TextToWbemObject
WbemObjectToText
Static task
static1
Behavioral task
behavioral1
Sample
b5381e91397cd27ab0278caf9dd73665.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5381e91397cd27ab0278caf9dd73665.dll
Resource
win10v2004-20240226-en
Target
b5381e91397cd27ab0278caf9dd73665
Size
121KB
MD5
b5381e91397cd27ab0278caf9dd73665
SHA1
785252dcf23bb510fe8dceee2aca7549230865f4
SHA256
16e7b578a24717f4bf787d0c091d8fbc3b8dd5250d83f922c96fcd4e853cd002
SHA512
025bbd9cac280b78721914945680e6394db3be05c7daea57ad88b3d55f8ef70ecac2e5070f2b0afb7c67fbec7dd3a218140a1c493b242d09aa150201dc2378d0
SSDEEP
3072:8cIcppkcfFv59/dNh8Q166C3Ajms4cVmG7RpKW8dUe9:VjFv55rhxi/+mYqn9
Checks for missing Authenticode signature.
resource |
---|
b5381e91397cd27ab0278caf9dd73665 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
wcsncpy
_adjust_fdiv
malloc
_initterm
free
wcscat
wcsstr
wcscspn
swprintf
_wcsicmp
wcschr
??2@YAPAXI@Z
wcscpy
_wcsnicmp
wcslen
atol
sscanf
iswspace
CoCreateInstance
StringFromGUID2
CreateStreamOnHGlobal
SysAllocStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayDestroy
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
CloseWbemTextSource
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenWbemTextSource
TextToWbemObject
WbemObjectToText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ