DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cbd5c141cc28cfbfb5693915bf8223d5.dll
Resource
win7-20240221-en
Target
cbd5c141cc28cfbfb5693915bf8223d5
Size
417KB
MD5
cbd5c141cc28cfbfb5693915bf8223d5
SHA1
a295bc482c598db1cd343e067ea76319334ad0a0
SHA256
e29f90648c46d3ae7c78d579f42444968797ded4745c8776849a970f12eb6152
SHA512
62835dfec08e57b3a53bc8a6a2768dd607a0c21ed66ac332539205af5f8566e5e58107a2383f090e3f903680e12802d20e9907972b88591ad826edf5d690b6c0
SSDEEP
12288:H0X2VqOE6NV+mgv0e/duqi4CLa1jiGgtQTB4xj:HiKqsfgv1duqnC0OGgKTB4
Checks for missing Authenticode signature.
resource |
---|
cbd5c141cc28cfbfb5693915bf8223d5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UrlEscapeW
StrCmpIW
UrlUnescapeW
UrlGetPartW
PathMatchSpecW
StrStrIW
LoadLibraryW
MultiByteToWideChar
GetModuleFileNameW
lstrcmpW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetExitCodeProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
CreateFileA
GetProcessHeap
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
GetModuleHandleA
GetDateFormatA
GetTimeFormatA
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCurrentProcessId
GetLastError
Sleep
TerminateThread
WaitForSingleObject
GetExitCodeThread
CloseHandle
SetThreadPriority
GetProcAddress
LoadLibraryA
FreeLibrary
WriteFile
CreateFileW
LocalFree
LocalAlloc
DeleteFileW
GetTempFileNameW
GetFullPathNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
VirtualQuery
WideCharToMultiByte
SetLastError
lstrlenW
GetTempPathW
GetVolumeInformationW
GetWindowsDirectoryW
GetSystemInfo
ReleaseMutex
CreateMutexW
CreateProcessW
GetTickCount
GetSystemTime
MoveFileExW
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapFree
GetCurrentThreadId
GetCommandLineA
ExitThread
CreateThread
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
EnumChildWindows
GetWindowTextW
GetWindowLongW
SetWindowLongW
CallWindowProcW
SetWindowPos
SetWindowTextW
wsprintfW
RealGetWindowClassW
SendMessageW
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayPutElement
SysStringLen
VariantChangeType
VariantCopy
SysAllocString
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
inet_addr
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
UuidToStringW
RpcStringFreeW
UrlMkGetSessionOption
InternetSetOptionW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
InternetCrackUrlW
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetQueryOptionW
MapAndLoad
UnMapAndLoad
CryptGetHashParam
CryptDecrypt
CryptCreateHash
CryptGenRandom
CryptAcquireContextW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
CryptHashData
CryptDeriveKey
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
CryptReleaseContext
SHCreateDirectoryExW
DnsFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ