DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IEGetWriteableHKCU
OpenURL
Static task
static1
Behavioral task
behavioral1
Sample
2d1b25f0105031e3d7f8b867aa45f9cb3d1bfb5e7d529770c9d3c9564b91d559.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2d1b25f0105031e3d7f8b867aa45f9cb3d1bfb5e7d529770c9d3c9564b91d559.dll
Resource
win10v2004-20240226-en
Target
2d1b25f0105031e3d7f8b867aa45f9cb3d1bfb5e7d529770c9d3c9564b91d559
Size
532KB
MD5
c2a4b998032321fa75626bd0978dabe3
SHA1
342a07cd7cce1f619ab117eb64c355a149f0a0a7
SHA256
2d1b25f0105031e3d7f8b867aa45f9cb3d1bfb5e7d529770c9d3c9564b91d559
SHA512
c00b1caf00d841a89121390023617486c36796fe2303db665fe1ad1ac891cdd2397aad2f74fc7baf8ab529ef85d370f80e702236d665e45d7eebc119b5b7b38a
SSDEEP
6144:J1kT8lnHYZGznYQ54rXA0vRtBeY7FX03vxdi+l48ZIWdqT:57D55ktp7FX0fxA+l48ZIWdq
Checks for missing Authenticode signature.
resource |
---|
2d1b25f0105031e3d7f8b867aa45f9cb3d1bfb5e7d529770c9d3c9564b91d559 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyW
RegQueryValueExW
CreateStatusWindowW
ImageList_Destroy
ImageList_LoadImageW
GetDeviceCaps
CloseHandle
CreateFileW
CreateProcessW
DisableThreadLibraryCalls
EnumResourceNamesW
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileStringW
GetProcAddress
GetSystemDirectoryW
GetTickCount
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MulDiv
MultiByteToWideChar
SizeofResource
WideCharToMultiByte
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
WriteFile
lstrcmpW
lstrcmpiW
CoCreateInstance
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateStreamOnHGlobal
OleRegGetUserType
PropVariantClear
StgCreateStorageEx
LoadRegTypeLib
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
VariantInit
SHGetFolderPathW
ShellAboutW
ShellExecuteExW
PathAppendW
PathCreateFromUrlW
PathFindExtensionW
PathIsURLW
SHRegCloseUSKey
SHRegEnumUSValueW
SHRegOpenUSKeyW
SHRegQueryUSValueW
ord167
UrlApplySchemeW
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_assert
_strdup
_wcsnicmp
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcschr
wcstol
CoInternetParseUrl
CreateAsyncBindCtx
CreateURLMoniker
CreateURLMonikerEx2
ReleaseBindInfo
CreatePopupMenu
CreateWindowExW
DdeCmpStringHandles
DdeCreateStringHandleW
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeInitializeW
DdeNameService
DdeUninitialize
DefWindowProcW
DestroyIcon
DestroyWindow
DialogBoxParamW
DispatchMessageW
EnableWindow
EndDialog
GetClientRect
GetDC
GetDlgItem
GetMenuItemCount
GetMenuItemInfoW
GetMessageW
GetPropW
GetSubMenu
GetSystemMetrics
GetWindowLongPtrW
GetWindowTextLengthW
GetWindowTextW
InsertMenuItemW
IsWindowVisible
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
PostMessageW
PostQuitMessage
RegisterClassExW
ReleaseDC
SendMessageW
SetFocus
SetMenu
SetPropW
SetWindowLongPtrW
SetWindowPos
ShowWindow
TranslateMessage
UnregisterClassW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IEGetWriteableHKCU
OpenURL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ