DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
890f6515361e55ff60d0629866b1c5d6900756c1d57242306e4387c6c8316ec4.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
890f6515361e55ff60d0629866b1c5d6900756c1d57242306e4387c6c8316ec4.dll
Resource
win10v2004-20240226-en
Target
890f6515361e55ff60d0629866b1c5d6900756c1d57242306e4387c6c8316ec4
Size
700KB
MD5
ca1e4ae5859199f9a44f86550acd82f7
SHA1
d9b823f23bfb3b2369a28c576a07f5093328d5d6
SHA256
890f6515361e55ff60d0629866b1c5d6900756c1d57242306e4387c6c8316ec4
SHA512
8d076a7cb88542501ea5ebc75a1d15590bc793e91eeffd30326eca3a8adcaf82a50e4105f4572b32f7fb021fdb599d1a283317fa57373d06a94ec27788c19026
SSDEEP
12288:0+PNdxwpRNdtlBanf5zcSFWgFWqFhF4LaFhF4LDMa141FW53n4JRbrWX:pxmBanf5zcSFWgFWqFhF4OFhF4
Checks for missing Authenticode signature.
resource |
---|
890f6515361e55ff60d0629866b1c5d6900756c1d57242306e4387c6c8316ec4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcessId
GetVersionExA
OpenMutexA
EnterCriticalSection
LeaveCriticalSection
CloseHandle
OutputDebugStringA
GetEnvironmentVariableA
MulDiv
SizeofResource
FreeResource
FindResourceA
LoadResource
LockResource
GetVolumeInformationA
CreateFileA
GetFileTime
GetSystemDirectoryA
GetTimeZoneInformation
GetProcessAffinityMask
SetProcessAffinityMask
Sleep
SetErrorMode
GetModuleHandleA
GetProcAddress
InterlockedExchange
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
LoadLibraryA
FreeLibrary
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcess
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
CreateDialogParamA
LoadStringW
GetWindowRect
GetDesktopWindow
wsprintfA
SetWindowLongA
GetWindowLongA
LoadStringA
GetDlgItem
SendMessageA
EnableWindow
SetWindowTextA
SetTimer
KillTimer
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoFreeUnusedLibraries
CoTaskMemAlloc
_itoa
_purecall
time
?terminate@@YAXXZ
fwrite
_access
ftell
fclose
fopen
fseek
fread
_stat
strstr
strncpy
strncmp
_mbsnbcpy
_except_handler3
_ftol
_iob
fprintf
_CIpow
printf
malloc
free
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
atol
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ