DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bbe5ad4ce9cbc746c9adc920c4275b78.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bbe5ad4ce9cbc746c9adc920c4275b78.dll
Resource
win10v2004-20231215-en
Target
bbe5ad4ce9cbc746c9adc920c4275b78
Size
160KB
MD5
bbe5ad4ce9cbc746c9adc920c4275b78
SHA1
e6740bde5c5fe5d3071586fffac3c9f128245585
SHA256
b85857b7f9876183ff1bc898b0a7e55a7e2f58a7f15a366e82431a86e0e2207c
SHA512
e12c15177bd2fbbff1088b62c0112dd3f697c9ee1cdfa319415661ab646df95c1cebdc872a122aebd3e63fe0e90679b42c4d60533a55e0f2ad881921f10072ec
SSDEEP
3072:Hfmj2so6UeMPj/pLODKdCM4+ZvH0rVQrcTEon2Knba:HfdjdjpUrVQzKnba
Checks for missing Authenticode signature.
resource |
---|
bbe5ad4ce9cbc746c9adc920c4275b78 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteProcessMemory
GetProcAddress
VirtualAllocEx
LoadLibraryA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetLocalTime
SleepEx
CreateFileA
GetCurrentProcessId
GetModuleFileNameA
CreateRemoteThread
RaiseException
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetACP
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
FreeLibrary
OpenProcess
CloseHandle
GetTickCount
QueryPerformanceCounter
LocalFree
QueryPerformanceFrequency
SetStdHandle
GetCPInfo
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetFileType
GetFileAttributesA
WriteFile
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
HeapFree
HeapReAlloc
GetLastError
MultiByteToWideChar
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
DispatchMessageA
EnumWindows
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
wsprintfA
ShowWindow
GetMessageA
TranslateMessage
CreateWindowExA
SystemParametersInfoA
SetWindowPos
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoCreateInstance
CoInitialize
CoCreateGuid
VariantInit
GetErrorInfo
SysAllocString
UuidToStringA
Netbios
SHGetValueA
SHSetValueA
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetSetOptionA
InternetCloseHandle
InternetOpenUrlA
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ