DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c314790971752a086dd077e0cf9637db.dll
Resource
win7-20240221-en
Target
c314790971752a086dd077e0cf9637db
Size
268KB
MD5
c314790971752a086dd077e0cf9637db
SHA1
685075211f105c449046e5f667a4fa8f451b74d6
SHA256
7dc7908c83e7f2871081bc023aba43a583a6ef9894d662ff389bb01d89aa396a
SHA512
6f66a1f1c4dc294544f4c21a3d6458c1a6dc32c3a5296deb628577de619c978b38eafb75def51e6aff0e78c07c8b62a9e6630f9bf2b3114ab8de2e8692763b11
SSDEEP
3072:+webuzNGQkoN64IJq8hKG4spRSNoiUhzJdoJFO946QXMmAI1gwy8i1o3eeEHXT6g:+bhmN64aKIpRSNoz6C4HMKj8oS
Checks for missing Authenticode signature.
resource |
---|
c314790971752a086dd077e0cf9637db |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WinExec
DisableThreadLibraryCalls
lstrcmpiA
lstrcpyA
lstrlenA
GetModuleFileNameA
GetSystemTime
WriteFile
SetFilePointer
CloseHandle
ReadFile
GetFileSize
CreateFileA
DeleteFileA
GetSystemDirectoryA
CopyFileA
TerminateThread
GetLastError
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
GetShortPathNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
LeaveCriticalSection
Sleep
HeapDestroy
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcatA
InterlockedIncrement
InterlockedDecrement
LockResource
GetWindowsDirectoryA
FindClose
FindFirstFileA
CompareStringW
CompareStringA
SetEndOfFile
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetTempPathA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleHandleA
CreateThread
lstrlenW
EnterCriticalSection
WideCharToMultiByte
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
SetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapSize
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetLocalTime
GetTimeZoneInformation
InterlockedExchange
DefWindowProcA
CharNextA
PostQuitMessage
LoadIconA
RegisterClassExA
GetSystemMetrics
CreateWindowExA
ShowWindow
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
ShellExecuteExA
SHGetSpecialFolderPathA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
VariantCopy
SysFreeString
VarUI4FromStr
SysAllocString
VariantChangeType
VariantClear
LoadRegTypeLi
SysStringLen
LoadTypeLi
RegisterTypeLi
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
InternetOpenUrlA
timeGetTime
Netbios
PathFileExistsA
WSAStartup
WSACleanup
htons
connect
recv
ntohl
closesocket
socket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ