DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ObfuscateCLSID
ObfuscateCLSID2
ObfuscateCLSID3
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Adware.Downware.54.22424.26324.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Adware.Downware.54.22424.26324.dll
Resource
win10v2004-20240611-en
Target
SecuriteInfo.com.Adware.Downware.54.22424.26324.dll
Size
263KB
MD5
a3ec92b807f93a437006e014c2ba9ab0
SHA1
c2e0a9c411044ac1829da97511fdc658ace8b409
SHA256
2f4dafb7a1c034864d1a686d0bf346728e963317ede5b6bd2a2b6dc21cef6c12
SHA512
4a0d41867319e717aeb7cc721fdda95319b04a7dfc80048a5b9914861e1c6d8baee3073985bb480be802f9ab1e9a04b622eab7ca622e561b249e8dcf55e802a5
SSDEEP
3072:fYAbepWjRJKfn3K3+O64bxMfDmwwmSVSj7HAQQTstCU68gkWAT9yAj254gSWHlP:TbHPKvzOjWkSj7H1tCUOARNXgH5
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Adware.Downware.54.22424.26324.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenW
InternetSetOptionW
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
sqlite3_exec
sqlite3_bind_int
sqlite3_bind_text
sqlite3_changes
sqlite3_step
sqlite3_column_type
sqlite3_prepare
sqlite3_open
sqlite3_reset
sqlite3_finalize
sqlite3_errmsg
sqlite3_busy_timeout
sqlite3_close
sqlite3_column_count
sqlite3_vmprintf
sqlite3_free
sqlite3_mprintf
sqlite3_column_int
sqlite3_column_text
LoadLibraryA
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleHandleA
GetTimeZoneInformation
LCMapStringW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
GetLastError
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
lstrlenW
lstrlenA
WideCharToMultiByte
EnterCriticalSection
LCMapStringA
GetModuleFileNameW
CloseHandle
CreateThread
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetSystemTimeAsFileTime
InterlockedCompareExchange
LocalFree
LocalAlloc
FreeLibrary
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
VirtualProtect
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
ReadFile
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
LeaveCriticalSection
SetEnvironmentVariableA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
VirtualFree
HeapCreate
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlUnwind
CharNextW
RegCloseKey
RegQueryValueExW
RegSetValueExW
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
RegCreateKeyExW
RegOpenKeyExW
ord165
CoCreateInstance
CoTaskMemFree
LoadTypeLi
LoadRegTypeLi
DispCallFunc
VariantInit
SysAllocString
SysAllocStringLen
VariantClear
RegisterTypeLi
UnRegisterTypeLi
SysFreeString
SysStringLen
ord61
ord68
ord15
ord64
ord56
ord49
ord10
ord11
ord30
ord32
ord58
ord23
ord31
PathAppendW
PathAddBackslashW
PathRemoveFileSpecW
SHSetValueW
SHDeleteKeyW
PathFileExistsW
RpcStringFreeW
UuidCreate
UuidToStringW
UuidFromStringA
URLDownloadToFileW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ObfuscateCLSID
ObfuscateCLSID2
ObfuscateCLSID3
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ