DllCanUnloadNow
DllGetClassObject
DllGetName
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d73cad1c50e9ac0c9f92e93cc1889a78.dll
Resource
win7-20240221-en
Target
d73cad1c50e9ac0c9f92e93cc1889a78
Size
451KB
MD5
d73cad1c50e9ac0c9f92e93cc1889a78
SHA1
a390d73f7e23282bd7bd821605ed0095b9200f4c
SHA256
ae62dc3869a50c8902167c2cb19c2a9aec41b1e96636bcfb1d75a2544f4b448e
SHA512
cb2764d8e28929ecf2d39a5231cc9cbe8800875ccb723e31c474f0ec955d404d11fa4db69cf5ba5ce1d1da02419b08cb263fe63e9aebe5c2e38051c29b1e3d91
SSDEEP
12288:3U1yDzBEssjaeGC+2Jm4YVjxgUjMm2D1jnd/nZY+Bs:+A5sqQYBKD1jnpZ7Bs
Checks for missing Authenticode signature.
resource |
---|
d73cad1c50e9ac0c9f92e93cc1889a78 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileMappingA
CreateMutexA
ReleaseMutex
GetVersionExA
CloseHandle
CreateFileA
DeviceIoControl
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetSystemTime
CreateThread
ReadFile
FindFirstFileA
FindNextFileA
GetFileTime
GetTickCount
GetProcAddress
LoadLibraryA
FreeLibrary
GetUserDefaultLangID
GetVolumeInformationA
GetEnvironmentVariableA
lstrcmpiA
WideCharToMultiByte
IsBadReadPtr
IsBadCodePtr
Module32First
GetModuleHandleA
VirtualProtect
CreateToolhelp32Snapshot
Module32Next
GetVersion
GetCurrentProcessId
GetSystemInfo
FindResourceA
LoadResource
ResetEvent
IsDBCSLeadByte
RaiseException
DisableThreadLibraryCalls
GetModuleFileNameA
LoadLibraryExA
PulseEvent
TerminateThread
WaitForMultipleObjects
GetFullPathNameA
lstrcpynA
WriteFile
CreateDirectoryA
Sleep
CopyFileA
GetTempFileNameA
MoveFileA
DeleteFileA
GetCurrentThreadId
LocalFree
GetOEMCP
GetCPInfo
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
RtlUnwind
GetProcessHeap
CreateEventA
SetEvent
WaitForSingleObject
InterlockedIncrement
UnmapViewOfFile
MapViewOfFile
GetLastError
lstrlenW
MultiByteToWideChar
InterlockedDecrement
lstrlenA
SizeofResource
GetCommandLineA
GetModuleFileNameW
InterlockedCompareExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
GetStdHandle
IsValidCodePage
IsValidLocale
GetFileType
WriteConsoleW
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
VirtualAlloc
HeapFree
HeapAlloc
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LCMapStringW
LoadLibraryW
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
LCMapStringA
GetClassNameA
IsWindow
EnumThreadWindows
UnregisterClassA
CharNextA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegSetValueExA
SHGetSpecialFolderPathA
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoTaskMemAlloc
CoTaskMemRealloc
OleRun
CLSIDFromString
CLSIDFromProgID
SysFreeString
SysAllocString
SysStringLen
VariantClear
GetErrorInfo
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreateVector
LoadRegTypeLi
VarUI4FromStr
LoadTypeLi
SysAllocStringLen
VarBstrCat
VariantInit
PathFileExistsA
SHDeleteKeyA
PathGetDriveNumberA
SnmpUtilOidCpy
IsValidURL
HttpSendRequestA
InternetGetCookieExA
HttpQueryInfoA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
HttpOpenRequestA
InternetReadFile
WSACleanup
WSAStartup
gethostbyname
DllCanUnloadNow
DllGetClassObject
DllGetName
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ