DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bf43733b4eea27b33b6da8485b80896c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf43733b4eea27b33b6da8485b80896c.dll
Resource
win10v2004-20240226-en
Target
bf43733b4eea27b33b6da8485b80896c
Size
71KB
MD5
bf43733b4eea27b33b6da8485b80896c
SHA1
80265c989d4bad8f4c6b83eb9c956b735be0e94e
SHA256
234ee0dd412bce59bedd3d2758be68d100791cb81a5c9351329f69595c55cd75
SHA512
64d1900a73709251db07eda5584f476eec248a09fc4b2630d19d5bfbc62352c4cfb59c09e2be61ed311f775c1ddbc8ec1a7a749a19e4319a0e8a1839875b2863
SSDEEP
384:m+vyw0yCQuFC0sZMCV6yvV5MjKxnZtV3tb5K8AvFBdhe106emRhC:m+qvyCQunsyC0orMSnVjK3vFB4GmbC
Checks for missing Authenticode signature.
resource |
---|
bf43733b4eea27b33b6da8485b80896c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateToolhelp32Snapshot
Process32First
CompareStringA
lstrcatA
OpenProcess
TerminateProcess
lstrcpyA
CloseHandle
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryA
SetLastError
OutputDebugStringA
GetLastError
LoadLibraryW
lstrcpyW
FreeLibrary
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
lstrcmpA
lstrlenA
RtlUnwind
GetProcessHeap
HeapAlloc
HeapFree
BeginPaint
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
GetWindowLongA
SetWindowLongA
CreateWindowExA
UnregisterClassA
RegisterClassA
wsprintfW
LoadBitmapA
EndPaint
CallWindowProcA
IsWindow
DestroyWindow
ShowWindow
CreateCompatibleDC
SelectObject
DeleteDC
CreateFontA
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoInitialize
CoUninitialize
CoCreateInstance
SysAllocString
SysFreeString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ