DllGetClassObject
DllRegisterServer
DllUnregisterServer
KVyYTyTGYQGVQhaOEt
Static task
static1
Behavioral task
behavioral1
Sample
e0a2bcddb95cb49509076d561d81082f.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e0a2bcddb95cb49509076d561d81082f.dll
Resource
win10v2004-20240226-en
Target
e0a2bcddb95cb49509076d561d81082f
Size
32KB
MD5
e0a2bcddb95cb49509076d561d81082f
SHA1
ad453d6db6cc59ccdacc241f5b396e09ea88ed8b
SHA256
59b20b54ec3cbba365986b0f3d2fe0c4463a5363918588f70253f7c59df303e6
SHA512
ca1c067cd60c1d9c322c9a208d9e4d70c2f88951a5bf9d97add9edf2a5bb83eaee079115a80c8dcf7b08f7e923f387a979a074e74901ed0ef91464bd51883a6e
SSDEEP
768:rVjKCFQAIa7bmOGLUY2jRZEHPzM5Ncr4ois1h:rPFia3mVLUY2jROPzMDcSi
Checks for missing Authenticode signature.
resource |
---|
e0a2bcddb95cb49509076d561d81082f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetSystemDirectoryA
CloseHandle
CreateThread
InterlockedIncrement
GetModuleFileNameA
GetLocalTime
GetProcAddress
LoadLibraryA
DeleteFileA
KillTimer
SetTimer
UnhookWindowsHookEx
RegisterClassExA
CallNextHookEx
FindWindowExA
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
_initterm
free
strstr
_access
strchr
fopen
fwrite
_strlwr
malloc
_adjust_fdiv
_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
strrchr
fclose
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KVyYTyTGYQGVQhaOEt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ