DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0376eb90f68c0e8fe8cdce9506505e24d9221cae5c57aaf91fef4119c60c8b56.dll
Resource
win7-20240221-en
Target
0376eb90f68c0e8fe8cdce9506505e24d9221cae5c57aaf91fef4119c60c8b56
Size
64KB
MD5
88969fa3932a95adaa66fb574680f920
SHA1
3ee7b75d7eae0ec74868555996046612efea5129
SHA256
0376eb90f68c0e8fe8cdce9506505e24d9221cae5c57aaf91fef4119c60c8b56
SHA512
b195766952d4faad2a75724785dfceced5cf6bcceac32c5c83e680eacdd3817964756b8e793268ddc9cdf5ccadf60ee1dcbb015785dc7103e9c78ae95356c495
SSDEEP
768:gWWu9CvElZ13ZMkNbFKDbJLwjv3MjoPcLVJe/9vClIxGjIo3O4JWQQ6arNGF6zpm:gWYvEmcQ2fM0ELVJm9KGo3OIWoaNp
Checks for missing Authenticode signature.
resource |
---|
0376eb90f68c0e8fe8cdce9506505e24d9221cae5c57aaf91fef4119c60c8b56 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateThread
FreeLibrary
LocalFree
SetFileAttributesA
DeleteCriticalSection
CloseHandle
WaitForSingleObject
GetSystemDirectoryA
GetCommandLineW
ExitProcess
Process32Next
Process32First
WritePrivateProfileStringA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
MoveFileA
InitializeCriticalSection
DisableThreadLibraryCalls
CreateDirectoryA
GetCurrentProcessId
Sleep
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
LoadLibraryA
GetProcAddress
GetModuleFileNameA
DeleteFileA
CreateProcessA
RemoveDirectoryA
GetExitCodeProcess
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strchr
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
strstr
strncmp
strncpy
_wcslwr
wcsstr
_purecall
strrchr
fopen
strcat
strcpy
memset
_access
sprintf
??3@YAXPAX@Z
strlen
memcmp
memcpy
atoi
_strupr
fclose
fread
??2@YAPAXI@Z
ftell
fseek
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ