DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c7928141488bcad653a53daa831435c7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c7928141488bcad653a53daa831435c7.dll
Resource
win10v2004-20240226-en
Target
c7928141488bcad653a53daa831435c7
Size
63KB
MD5
c7928141488bcad653a53daa831435c7
SHA1
ff44b8276df856ce0d26d79fe14ebbadfeaf4b0c
SHA256
77e4b7fb70c2cf280d240a80b3cedd8f5b7bb011f2a94d0c54a0dee5b32134ad
SHA512
0c85ef8c94bdf7f7f070d52b89968da506ec8afed234c79e3a9862bf76a10e1990016b2b6ec5fb1d5af74c8c760683f4a03b746788478e59d152bf18c8132d79
SSDEEP
768:gRAHaZrSqES0wZwX/CXahPtsCnKXNcWbyn03Ei3Bl1EJR6Uxi:MoaZtcSSKd6n0RREJRxi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c7928141488bcad653a53daa831435c7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapDestroy
GetProcAddress
LoadLibraryA
IsDBCSLeadByte
lstrcpyA
lstrcatA
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
lstrcmpiA
WriteFile
DisableThreadLibraryCalls
GetTempPathA
LoadLibraryExA
lstrcpynA
HeapFree
GetStringTypeA
GetStringTypeW
RtlUnwind
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
GetSystemInfo
HeapAlloc
LoadResource
GetLastError
FindResourceA
WideCharToMultiByte
SizeofResource
FreeLibrary
lstrlenA
GetModuleFileNameA
GetShortPathNameA
DebugBreak
MultiByteToWideChar
HeapReAlloc
CloseHandle
CreateFileA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
Rectangle
DeleteDC
SetViewportOrgEx
RestoreDC
SetMapMode
SaveDC
SetWindowOrgEx
SetTextAlign
TextOutA
LPtoDP
CreateDCA
GetDeviceCaps
CreateRectRgnIndirect
CreateOleAdviseHolder
OleLoadFromStream
OleRegGetMiscStatus
OleRegEnumVerbs
OleRegGetUserType
CoCreateInstance
WriteClassStm
OleSaveToStream
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
ShellExecuteA
UrlMkSetSessionOption
SetWindowPos
SetWindowRgn
OffsetRect
IsWindow
DestroyWindow
GetClassInfoExA
GetParent
IsChild
InvalidateRect
LoadCursorA
CallWindowProcA
GetWindowLongA
SetWindowLongA
ShowWindow
UnionRect
PtInRect
wsprintfA
EqualRect
GetKeyState
DefWindowProcA
CharNextA
IntersectRect
EndPaint
ReleaseDC
GetDC
wvsprintfA
MessageBoxA
RegisterClassExA
GetClientRect
CreateWindowExA
GetFocus
SetFocus
BeginPaint
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
socket
inet_addr
htons
sendto
closesocket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE