DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
cabd690b0993ec1ddcaad3485df15f9b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cabd690b0993ec1ddcaad3485df15f9b.dll
Resource
win10v2004-20240226-en
Target
cabd690b0993ec1ddcaad3485df15f9b
Size
165KB
MD5
cabd690b0993ec1ddcaad3485df15f9b
SHA1
17472fd0f7ed7de5e931e6e2e37138c121e85984
SHA256
b715b04c247544483edfa538c1d6ebe2b624624c5fe9c98e0b139c9971e7c0d9
SHA512
5435a0b94f72265e3b90651b1b54e8885aeaf440cc963304361ba25985d8c945d71ded85d8ef0ce195fbac8810ba6c43ad37cecaa39b3395b6d12702d64f2fdd
SSDEEP
3072:zffph2LOnI35QoxcfYST+FseLK0BU+EcKEng:zIOn45y7TaI0BBc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cabd690b0993ec1ddcaad3485df15f9b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
FreeResource
LockResource
GetACP
GetCPInfo
LoadLibraryExA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
GetModuleFileNameA
GetShortPathNameA
MultiByteToWideChar
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
DisableThreadLibraryCalls
WinExec
lstrlenW
WideCharToMultiByte
CreateFileA
LCMapStringA
ReadFile
SetEndOfFile
IsBadCodePtr
SetFilePointer
SetStdHandle
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LocalFree
HeapFree
HeapAlloc
HeapReAlloc
CreateDirectoryA
GetCommandLineA
GetVersion
RaiseException
CloseHandle
GetFileAttributesA
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
RtlUnwind
WriteFile
TerminateProcess
HeapSize
GetOEMCP
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
RestoreDC
CreateDCA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
SHGetSpecialFolderLocation
SHGetPathFromIDListA
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetFocus
BeginPaint
GetClientRect
EndPaint
GetDC
ReleaseDC
DefWindowProcA
IsChild
DestroyWindow
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
CharNextA
CreateWindowExA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE