DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ieh32.dll
Resource
win7-20240215-en
Target
4bab1c936db33ff06edfe6dea6b88e9a_JaffaCakes118
Size
47KB
MD5
4bab1c936db33ff06edfe6dea6b88e9a
SHA1
96a31ed8d059c622a588f09d5fc02951aac37d53
SHA256
326e305450460193c310245b7677c903586780f49a5107f14ad39837cde84832
SHA512
afe89467397317a0550f04bf6be3714c8955e8bad5f9a10df14ae7f8da42032777510e817fec70b66fef21e6a37d2de337931c90d0d3cf1eeff03b0f50d125a8
SSDEEP
768:hlcx1SpppAVL6lrWKVM0XZ9//1Gq8Uthl1Slg8y0HBGsX1IUShZNrDbWH6inj9it:nc2pMVepWoM0XZ9/bB1Sy10MsXBmDGLk
Checks for missing Authenticode signature.
resource |
---|
unpack001/ieh32.dat |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
lstrcmpiW
GetModuleFileNameW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
DeleteCriticalSection
LoadLibraryA
GetCurrentProcessId
WideCharToMultiByte
GetModuleHandleA
CloseHandle
CreateSemaphoreW
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
GetProcAddress
LocalFree
FlushFileBuffers
CreateFileA
WriteConsoleW
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetConsoleCP
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
FreeEnvironmentStringsA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
CharNextW
UnregisterClassA
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
GetSecurityDescriptorSacl
SetSecurityInfo
RegEnumKeyExW
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
LoadTypeLi
VariantInit
VariantChangeType
VariantCopy
VariantClear
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
timeGetTime
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ