DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d789aa18327317724c9b5d25641f6062.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d789aa18327317724c9b5d25641f6062.dll
Resource
win10v2004-20240226-en
Target
d789aa18327317724c9b5d25641f6062
Size
176KB
MD5
d789aa18327317724c9b5d25641f6062
SHA1
16ddfca918119b4442d8dd2e977f98a380749682
SHA256
d3a41c1b50a5d20d271f30eab0340e3101824af80e5184ef88662a288dde96c6
SHA512
ec3235530367ee6e6879ac78d3b33e7d9b3a2d6a1be630844027b0e8f331ae7e507187fac8bd944f8bb026d040463573121f3281547a9ad1a62a1e73ec3da597
SSDEEP
3072:KdFnhQH+Edrqrj0QfJRESCX2lhic1/mBktiok:0V52XkVAByG
Checks for missing Authenticode signature.
resource |
---|
d789aa18327317724c9b5d25641f6062 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
URLDownloadToFileA
ReadFile
GetFileSize
CreateFileA
GetLastError
DeleteFileA
LoadResource
FindResourceA
GetCurrentProcessId
TerminateThread
GetVersionExA
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
lstrcmpA
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
lstrcatA
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
CloseHandle
DisableThreadLibraryCalls
GetModuleFileNameA
LocalFree
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
SetWindowLongA
CharNextA
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindow
GetSysColor
ShowWindow
DispatchMessageA
TranslateMessage
CheckMenuRadioItem
GetWindowLongA
GetComboBoxInfo
SetActiveWindow
AppendMenuA
MoveWindow
DrawFrameControl
FrameRect
InflateRect
DrawEdge
OffsetRect
GetSysColorBrush
GetMenuItemInfoA
UpdateWindow
CallNextHookEx
GetSystemMetrics
SystemParametersInfoA
GetWindowDC
DrawTextA
SetRectEmpty
UnhookWindowsHookEx
SetWindowsHookExA
LoadImageA
IsWindowVisible
CopyRect
GetKeyState
GetWindowRect
MapWindowPoints
CreatePopupMenu
TrackPopupMenu
DestroyMenu
GetMessagePos
ScreenToClient
SetCursor
MessageBoxA
CreateWindowExA
wsprintfA
GetClassNameA
GetDlgItem
SendMessageA
DestroyWindow
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
CreateAcceleratorTableA
GetParent
GetDC
GetDesktopWindow
ReleaseDC
RedrawWindow
IsWindow
SetWindowPos
BeginPaint
GetClientRect
FillRect
EndPaint
CallWindowProcA
GetFocus
IsChild
SetFocus
GetDeviceCaps
GetObjectA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
CreateFontA
EnumFontFamiliesExA
SetBkMode
SetBrushOrgEx
SetBkColor
SetTextColor
CreatePatternBrush
CreateBitmap
PatBlt
CreateDIBSection
CreateSolidBrush
CreateFontIndirectA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
ShellExecuteA
ReleaseStgMedium
RegisterDragDrop
OleRun
CoInitialize
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoCreateInstance
OleInitialize
CreateStreamOnHGlobal
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
SysStringByteLen
VariantInit
GetErrorInfo
SysAllocStringByteLen
DispCallFunc
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
VariantClear
LoadTypeLi
RegisterTypeLi
SysAllocString
VariantChangeType
SysFreeString
ImageList_Destroy
ImageList_Create
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Draw
ImageList_LoadImageA
ImageList_AddMasked
??3@YAXPAX@Z
__CxxFrameHandler
memcpy
memcmp
??2@YAPAXI@Z
_purecall
strlen
strtok
difftime
mktime
localtime
time
exit
free
realloc
memmove
_CxxThrowException
_itoa
wcstol
wcstod
wcscpy
wcslen
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
malloc
_adjust_fdiv
memset
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE