DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c52e2fa245eac24d08a4915e4f854592.dll
Resource
win7-20231129-en
Target
c52e2fa245eac24d08a4915e4f854592
Size
60KB
MD5
c52e2fa245eac24d08a4915e4f854592
SHA1
dc00d5b99227782fd4a8ba48572b19c889f1239b
SHA256
38e9253d9fa056fe2644d745335fbd2f2257e3e05b931abdbc08e6badf597dec
SHA512
df633ad132c89e51808f28ecfc8076c7689cdfd029f2e833e915962df218c26f6e9e4e4448c1c2508547bfc0b6f3ef6e7bf4276d6426247c77287212730c2c3a
SSDEEP
768:Et+SW0wTV88yUn9mjxW11ZWcjA+L9XOKONIW7qzyTZFMDd9530EQ8avswvmeQQn+:HsU6ymELZWCOxl7BozSEVqJme1mKaLt
Checks for missing Authenticode signature.
resource |
---|
c52e2fa245eac24d08a4915e4f854592 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
MoveFileA
LeaveCriticalSection
EnterCriticalSection
RemoveDirectoryA
Process32Next
Process32First
Sleep
ExitProcess
GetExitCodeProcess
WaitForSingleObject
GetProcAddress
DisableThreadLibraryCalls
FindFirstFileA
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCommandLineW
CreateThread
CreateDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
LoadLibraryA
FreeLibrary
GetCurrentProcessId
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetSystemDirectoryA
CreateProcessA
GetModuleFileNameA
CloseHandle
InitializeCriticalSection
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strchr
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
strlen
sprintf
memcmp
memcpy
strstr
strrchr
strcat
atoi
_strupr
strcpy
_access
strcmp
wcsstr
_wcslwr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ