DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
d3c82243da35f3153585df8340b4f9a0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3c82243da35f3153585df8340b4f9a0.dll
Resource
win10v2004-20240226-en
Target
d3c82243da35f3153585df8340b4f9a0
Size
70KB
MD5
d3c82243da35f3153585df8340b4f9a0
SHA1
bd34af0b1a9de8470f22dfa54f7f2f835ce54439
SHA256
a9e2c81bc3c6f2ba8394fd9c00b1a3a352c3e9c061ab7efe21c154c0afb5fc62
SHA512
c11c05c398581a4bbaff0c88d83ef9c203a361881f850d2f753608dcafc55022c6e450e45b0017597232e6328dbddf4fc0f3e1884893a31d561d54e1c4ca3278
SSDEEP
768:OpfByXXZnLP90I98fwncQAe+NrPk52hWolTDqyjWk1FyXZciRUuGAbxXVq/nCrY6:OppwXZDeXw+KWWoFqKFwZcE5Yd8F
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d3c82243da35f3153585df8340b4f9a0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
MultiByteToWideChar
DisableThreadLibraryCalls
GetSystemInfo
HeapCreate
WideCharToMultiByte
lstrlenW
GetModuleFileNameA
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
GetShortPathNameA
SizeofResource
LoadResource
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcatA
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrlenA
FindResourceA
IsDBCSLeadByte
LockResource
DebugBreak
CreateFileA
WriteFile
LeaveCriticalSection
InitializeCriticalSection
SetEndOfFile
CreateProcessA
HeapAlloc
HeapReAlloc
HeapFree
GetLastError
CloseHandle
GetVersionExA
lstrcpyA
GetTempFileNameA
GetTempPathA
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
LPtoDP
CreateDCA
GetDeviceCaps
SetMapMode
DeleteDC
SetViewportOrgEx
RestoreDC
SaveDC
SetWindowOrgEx
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
ShellExecuteA
IsChild
GetFocus
GetClassInfoExA
GetWindowLongA
CreateWindowExA
CallWindowProcA
EndPaint
SetWindowLongA
DestroyWindow
BeginPaint
GetClientRect
RegisterClassExA
GetDC
ReleaseDC
wsprintfA
LoadCursorA
CharNextA
DefWindowProcA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE