DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b721cd560b3e980f8807132c94d8dc32.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b721cd560b3e980f8807132c94d8dc32.dll
Resource
win10v2004-20240226-en
Target
b721cd560b3e980f8807132c94d8dc32
Size
201KB
MD5
b721cd560b3e980f8807132c94d8dc32
SHA1
c50861dd31fd1538b4041800d19b5d5db880aec0
SHA256
dc20d0390744870c87472d6adf14994ebdbc845f971882651856a8f00e70bbe0
SHA512
572d64e55fcc0fbdffcb3430156c6c3543d0681f7ef09f52835bad77fca39c8b8f4d86e901941332a35c83c3204eb900f66411fc6808d69c3342beaf78647909
SSDEEP
3072:f9DP3KwZId4ZtbdI+8fqiOxke2b26/ryg0zOx79T:f9DfKwm2xkeojr2zO3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b721cd560b3e980f8807132c94d8dc32 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
lstrlenA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
UnmapViewOfFile
MapViewOfFile
GetTickCount
GetCurrentThreadId
LocalFree
GetLastError
GetModuleFileNameA
WideCharToMultiByte
lstrlenW
CloseHandle
WriteFile
lstrcmpiA
DebugBreak
OutputDebugStringA
DisableThreadLibraryCalls
CreateFileMappingA
GetShortPathNameA
lstrcpynA
lstrcpyA
lstrcatA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
FlushInstructionCache
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
LCMapStringW
GetCurrentProcessId
QueryPerformanceCounter
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
ExitProcess
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemTimeAsFileTime
LCMapStringA
RtlUnwind
RegCreateKeyA
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
OleLockRunning
OleUninitialize
CLSIDFromProgID
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
CoCreateInstance
VariantInit
SysAllocStringLen
SysAllocString
LoadTypeLi
VariantClear
SysFreeString
OleCreateFontIndirect
SysStringByteLen
SysStringLen
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
VariantChangeType
PathFindExtensionA
SHDeleteKeyA
SetWindowTextA
DestroyWindow
IsWindow
SetWindowLongA
ShowWindow
SetFocus
IsChild
GetClassInfoExA
wsprintfA
LoadCursorA
LoadStringA
GetFocus
UnregisterClassA
CreateAcceleratorTableA
GetParent
GetClassNameA
RedrawWindow
GetDlgItem
GetWindow
BeginPaint
EndPaint
GetSysColor
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
FillRect
SetCapture
ReleaseCapture
DestroyAcceleratorTable
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
RegisterWindowMessageA
SendMessageA
CallWindowProcA
GetWindowLongA
wvsprintfA
CharNextA
GetClientRect
CreateWindowExA
RegisterClassExA
DefWindowProcA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE