CreateInstance
DllCanUnloadNow
DllGetClassObject
MMC_Startup
_DllRegisterServer
_DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b853dc58dfb42f1cd0139fa9973ae1ff.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b853dc58dfb42f1cd0139fa9973ae1ff.dll
Resource
win10v2004-20240226-en
Target
b853dc58dfb42f1cd0139fa9973ae1ff
Size
559KB
MD5
b853dc58dfb42f1cd0139fa9973ae1ff
SHA1
7f9d120e3485e9c139895cf008b0239f1fef8aa5
SHA256
75e6c6136c15ed28780c0fd9f3c553d012b78957b019c66515c6a3543d3e3532
SHA512
4116ca9fda88eb5bf25e256923c76874ea004795f79a59227be8294991424de697fb1b7cf015783034eb751db76e4ad4ee68876bf8993fb55af640b2298706a4
SSDEEP
6144:5divvQzXxn0uq1cwd0EhVXZmllnReQnrRHtpdeZZgqvDonQMBTBUJ9aQ8IRYk6:Pig1nwJZuRZnrRHrde70QeTSJ9a4
Checks for missing Authenticode signature.
resource |
---|
b853dc58dfb42f1cd0139fa9973ae1ff |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
InternetSetStatusCallbackW
InternetSetOptionW
InternetQueryOptionW
InternetCloseHandle
InternetCrackUrlW
InternetOpenUrlW
HttpQueryInfoW
InternetQueryDataAvailable
InternetReadFileExA
InternetConnectW
HttpOpenRequestW
HttpSendRequestExW
InternetWriteFile
InternetOpenW
GetAdaptersInfo
DebugBreak
OutputDebugStringW
GetVolumeInformationW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
GetFileSize
ReadFile
LockResource
FindResourceExW
CreateMutexW
WaitForSingleObject
OpenMutexW
Sleep
WaitForMultipleObjects
HeapFree
CreateNamedPipeW
ConnectNamedPipe
OutputDebugStringA
DisconnectNamedPipe
GetProcessHeap
HeapAlloc
CreateThread
CreateEventW
SetEvent
ExitProcess
DisableThreadLibraryCalls
GetCurrentThreadId
SetLastError
GetCurrentProcess
FlushInstructionCache
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
CreateDirectoryW
FindFirstFileW
FindNextFileW
FindClose
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
DeleteFileW
MoveFileW
LoadLibraryW
GetProcAddress
FreeResource
LocalFree
CreateProcessW
ReleaseMutex
GetCurrentProcessId
CopyFileW
BeginUpdateResourceW
UpdateResourceW
FreeLibrary
GetTempPathW
GetTempFileNameW
CompareStringW
SetThreadPriority
ResumeThread
WideCharToMultiByte
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExW
GetFileAttributesW
EnumResourceLanguagesW
EnumResourceNamesW
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetFileType
InterlockedIncrement
DeleteCriticalSection
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
GetLastError
RaiseException
lstrlenA
InterlockedDecrement
lstrlenW
ResetEvent
lstrcmpiW
WriteConsoleW
GetModuleHandleA
SetEndOfFile
CompareStringA
SetEnvironmentVariableA
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
SetHandleCount
EndUpdateResourceW
VirtualQuery
wsprintfW
SetRectEmpty
PostMessageW
SystemParametersInfoW
IsRectEmpty
CharUpperW
ShowWindow
GetWindowRect
GetWindowDC
FrameRect
MapWindowPoints
RegisterWindowMessageW
GetWindowTextLengthW
GetCursorPos
GetWindowTextW
GetFocus
IsChild
GetDlgItem
SendMessageW
GetClassNameW
GetSysColor
SetWindowPos
RedrawWindow
GetClassInfoExW
CreateAcceleratorTableW
EndPaint
GetParent
ScreenToClient
MoveWindow
SetCapture
ReleaseCapture
FillRect
GetClientRect
InvalidateRgn
CallWindowProcW
InvalidateRect
GetDC
ReleaseDC
GetDesktopWindow
DestroyAcceleratorTable
GetWindowLongW
SetWindowLongW
LoadCursorW
DestroyWindow
IsWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
SetTimer
KillTimer
wvsprintfW
CharLowerW
CharNextW
LoadStringW
UnregisterClassA
BeginPaint
ClientToScreen
SetWindowTextW
SetFocus
GetWindow
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps
DeleteObject
SetSecurityDescriptorDacl
CreateProcessAsUserW
GetLengthSid
SetTokenInformation
ConvertStringSidToSidW
DuplicateTokenEx
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
InitializeSecurityDescriptor
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFolderPathW
CoInitializeEx
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
OleUninitialize
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoSetProxyBlanket
CoInitializeSecurity
CoCreateGuid
VarBstrCmp
SysAllocStringLen
VariantInit
VariantClear
OleCreateFontIndirect
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VarUI4FromStr
SHDeleteKeyW
SHDeleteValueW
SHSetValueW
_TrackMouseEvent
CoInternetSetFeatureEnabled
CoInternetIsFeatureEnabled
URLDownloadToFileW
CreateInstance
DllCanUnloadNow
DllGetClassObject
MMC_Startup
_DllRegisterServer
_DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ