DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ce1ebbe63f0a2a182354ac1e7cd69ea9.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce1ebbe63f0a2a182354ac1e7cd69ea9.dll
Resource
win10v2004-20240226-en
Target
ce1ebbe63f0a2a182354ac1e7cd69ea9
Size
164KB
MD5
ce1ebbe63f0a2a182354ac1e7cd69ea9
SHA1
51b6b1f6071a007c557e07c36e8ad281c9fd88f7
SHA256
5467fbc32fa5265224d2896cbaf722437bf17cc9988d7b8388836679905b8a94
SHA512
c2945bd40c08b967ed6647c1481b3217a8035365f00aa1ce19300d40d3e53d7ad3afad9d8e7513aeb062aff3c285915a9760e5f193dc8db5fca23bd172a607f1
SSDEEP
3072:+KhqyStiNMX9M7PsbEPiHh+08qsZJY+00EO/CdgKVjG:zhqyWSMcPsbsioLFU+VadRa
Checks for missing Authenticode signature.
resource |
---|
ce1ebbe63f0a2a182354ac1e7cd69ea9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DefWindowProcA
SetTimer
KillTimer
RegisterClassExA
CreateWindowExA
wsprintfA
EnumWindows
EnumChildWindows
ShowWindow
GetMessageA
TranslateMessage
OpenClipboard
CloseClipboard
SetWindowPos
SystemParametersInfoA
DispatchMessageA
GetWindowThreadProcessId
GetClassNameA
timeGetTime
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
StrStrIA
SHSetValueA
SHGetValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
SysAllocString
SysFreeString
VariantClear
GetErrorInfo
UuidToStringA
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExA
RegCloseKey
CryptAcquireContextA
Netbios
HttpQueryInfoA
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
strncpy
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
_CxxThrowException
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
islower
isupper
isgraph
strerror
wctomb
__mb_cur_max
isalpha
isalnum
isxdigit
ispunct
isspace
printf
malloc
wcscmp
wcslen
?what@exception@@UBEPBDXZ
free
tolower
fclose
fwrite
fopen
tmpnam
atoi
strtol
srand
toupper
strtok
strstr
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetCurrentProcessId
OpenProcess
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
MoveFileExA
GetLocalTime
lstrcmpA
lstrcmpiA
lstrcpynA
Sleep
GetCurrentThread
GetThreadTimes
CreateFileA
GetProcessTimes
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
HeapFree
SleepEx
GetTickCount
QueryPerformanceCounter
lstrcpyA
GetVersionExA
GetSystemInfo
GetCurrentDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameA
lstrlenA
GetVersion
HeapSize
HeapAlloc
GetCurrentProcess
SetLastError
QueryPerformanceFrequency
GetLastError
GetEnvironmentStrings
FreeEnvironmentStringsA
FormatMessageA
LocalFree
GetFullPathNameA
GetProcessHeap
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ