DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c2a1ba0e32cc23de25fba56dbef43a52.dll
Resource
win7-20240221-en
Target
c2a1ba0e32cc23de25fba56dbef43a52
Size
64KB
MD5
c2a1ba0e32cc23de25fba56dbef43a52
SHA1
10f1c1916cda3c154cd7cfaf7928f88c11d1649c
SHA256
35fafb4823a6cfc1bf4b48305b59f543c74d05d166e6dbdf5a82e7a7a5bff5b8
SHA512
9445285242768be1a44ed05a86ca1c702e587c276a7f47ff3ea7c0b14e54c25ff01fa5e5a2c4a1ab47896327a6c7ab040bc22f498ea55a5b572359ba892f4686
SSDEEP
1536:IKsa74Sjo2hxaJVgoT74DxS3e1lk8FFu1:CaVoxJVdkDx3lk8F01
Checks for missing Authenticode signature.
resource |
---|
c2a1ba0e32cc23de25fba56dbef43a52 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WritePrivateProfileStringA
CloseHandle
Process32Next
Process32First
SetFileAttributesA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateProcessA
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
MoveFileA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
LocalFree
GetCommandLineW
Sleep
ExitProcess
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
LeaveCriticalSection
EnterCriticalSection
CreateThread
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strlen
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
_wcslwr
wcsstr
fopen
fseek
ftell
fread
fclose
_access
??3@YAXPAX@Z
memcmp
memcpy
sprintf
strstr
??2@YAPAXI@Z
strncpy
strchr
memset
strncmp
_strlwr
strcpy
_purecall
strcmp
strrchr
strcat
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ