DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d7957cf7679e78de3b30be66c69fb30c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7957cf7679e78de3b30be66c69fb30c.dll
Resource
win10v2004-20240226-en
Target
d7957cf7679e78de3b30be66c69fb30c
Size
13KB
MD5
d7957cf7679e78de3b30be66c69fb30c
SHA1
e82091664683c7207edd240ab66fdb09583db132
SHA256
a94ce8341ea41ec7e63a1a11d0de292d9ab528b41fff20ea9fde3ad08e41c2bb
SHA512
3cc87126bcac5e3d98bb8748de01d1e440bbd66e9c28a68113ecfff0b9e94563d742eadb3868ad3305655c0b83dd5f35f9da522180412daeb0c0130a47deb571
SSDEEP
192:AmF/JUeC5mlicduL3dhewhI5NrM10T76ZTjGDWTobUlYmnPd/8L2EYB:AXecMxK/srM1IEjGDWT+Uv/I2EY
Checks for missing Authenticode signature.
resource |
---|
d7957cf7679e78de3b30be66c69fb30c |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwrite
fclose
sprintf
rand
fopen
strtok
??3@YAXPAX@Z
tmpnam
strncpy
atoi
memset
??2@YAPAXI@Z
srand
free
malloc
_snprintf
_initterm
_adjust_fdiv
_stricmp
GetModuleFileNameA
Sleep
SleepEx
DisableThreadLibraryCalls
OutputDebugStringA
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetLocalTime
GetCurrentProcessId
GetSystemDirectoryA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
MoveFileExA
DeleteFileW
wsprintfA
RegisterClassExA
CreateWindowExA
ShowWindow
DefWindowProcA
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
SHGetSpecialFolderPathA
SHChangeNotify
SHGetSpecialFolderPathW
CoCreateInstance
CoInitialize
InternetReadFile
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
SHGetValueA
SHSetValueA
RpcStringFreeA
UuidCreate
UuidToStringA
Netbios
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ