DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c0e41584f4b9d4e3e38d1c73fd30d085.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0e41584f4b9d4e3e38d1c73fd30d085.dll
Resource
win10v2004-20240226-en
Target
c0e41584f4b9d4e3e38d1c73fd30d085
Size
44KB
MD5
c0e41584f4b9d4e3e38d1c73fd30d085
SHA1
6743c5ae2308f23bd5dea7f37d721ce560c2264c
SHA256
bdd60f9c502c2bc30808e4e4426bc944f1d14eeb0219e534ac29e7c631cdfa2c
SHA512
bb3c3d869c413b8eb90b60587fb85cd9df298a8ab09e8c0e12c3c971798b6e8288694486132da54695a9781fd0b0f3c43499f4788737595ab07ce3aeb650863d
SSDEEP
768:V7hHwqZpkavmnNu5JHAXi62Y8iIUoY8qaCagD8gLa13F:V7yqwJY5JgXi627Nc8qRZLa3
Checks for missing Authenticode signature.
resource |
---|
c0e41584f4b9d4e3e38d1c73fd30d085 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
GetLocalTime
CreateThread
LoadLibraryA
WinExec
VirtualAlloc
GetProcAddress
CreateMutexA
InterlockedIncrement
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
GetWindowsDirectoryA
KillTimer
PostMessageA
FindWindowExA
ShowWindow
SetTimer
TranslateMessage
DispatchMessageA
CallNextHookEx
UnhookWindowsHookEx
RegisterClassExA
SetWindowsHookExA
GetMessageA
DefWindowProcA
CreateWindowExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
fwrite
_adjust_fdiv
malloc
_initterm
free
strrchr
_except_handler3
strchr
fopen
_stricmp
fclose
__CxxFrameHandler
sprintf
_pctype
??3@YAXPAX@Z
??2@YAPAXI@Z
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ