DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b59b9f9feaf5b24d9e58037b352cc3cd.dll
Resource
win7-20240220-en
Target
b59b9f9feaf5b24d9e58037b352cc3cd
Size
60KB
MD5
b59b9f9feaf5b24d9e58037b352cc3cd
SHA1
8113553395efedd96e474175585bbf39f07ad6b7
SHA256
b4b9bf980ea735a38f2e895cb3c8ca0b30716a5e4a7acbbaf32d5cb2357fb8af
SHA512
35f7342e0002c78e76d1f8dac95b31ddddedbdbfb11080446d7cc56a3fbf6af53682b3a2d52639a8193c2001e9eb373035a84fa335de1002482bd78430023167
SSDEEP
1536:4SKUQP4kOB3rKBQOGWAFXNA3PACTFIO3nsUStX:VQP4kORKBN2NEVncUSx
Checks for missing Authenticode signature.
resource |
---|
b59b9f9feaf5b24d9e58037b352cc3cd |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
lstrlenW
CreateThread
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
MoveFileA
CreateDirectoryA
Sleep
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
ExitProcess
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
SetFileAttributesA
LocalFree
RemoveDirectoryA
CreateProcessA
CloseHandle
GetCommandLineW
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
WritePrivateProfileStringA
BuildExplicitAccessWithNameA
RegQueryValueExA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
??3@YAXPAX@Z
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strncmp
strncpy
strchr
atoi
strstr
strrchr
sprintf
wcsstr
_wcslwr
strlen
memset
strcat
strcpy
_access
_strupr
??2@YAPAXI@Z
strcmp
memcmp
memcpy
_purecall
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ