DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpxCompress_a
UpxDecompress_a
Static task
static1
Behavioral task
behavioral1
Sample
3ca65512a28298f1d2ebf1c1e9910ae78dfa4f1e15d6c27b70c91392aeb52cb2.dll
Resource
win7-20240704-en
Target
3ca65512a28298f1d2ebf1c1e9910ae78dfa4f1e15d6c27b70c91392aeb52cb2
Size
167KB
MD5
31dd08db598ab9dbb954b11ece55e676
SHA1
066cacc8c47c8f1e39c1f7b6358141d3d6163d78
SHA256
3ca65512a28298f1d2ebf1c1e9910ae78dfa4f1e15d6c27b70c91392aeb52cb2
SHA512
ee48237d7c5f6e9e942933bb3b16d67e606f0cd3ea5f00e13cec0112c22e2d8c115ae1e135a2d3ff973daba4eb66328a6c7f34e795368b5a1dc1a531fb521991
SSDEEP
1536:py7eou9lx6gD2P0buRpLeQ3OwL7I9HPxKsVtYZfUdq8q8eykJl71yHR:pyhw72P0CRpLeVw7Nn71yx
Checks for missing Authenticode signature.
resource |
---|
3ca65512a28298f1d2ebf1c1e9910ae78dfa4f1e15d6c27b70c91392aeb52cb2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcpynW
lstrcpyW
lstrcatW
GetLocalTime
Sleep
CreateFileA
GetTempPathA
FlushFileBuffers
WriteFile
DeleteFileA
DeviceIoControl
WideCharToMultiByte
GetCurrentProcessId
MultiByteToWideChar
GetModuleHandleA
GetCurrentProcess
DebugBreak
SetErrorMode
OpenEventA
ExitProcess
OutputDebugStringA
LoadLibraryA
GetWindowsDirectoryA
IsBadCodePtr
SetUnhandledExceptionFilter
RaiseException
LocalFree
lstrcmpiW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
lstrlenW
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
CreateThread
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
DeleteCriticalSection
HeapDestroy
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetProcAddress
CharNextW
wsprintfA
SetWindowLongW
MessageBoxW
CharLowerW
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
VariantClear
SysAllocStringLen
LoadRegTypeLi
SysStringLen
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VarUI4FromStr
_onexit
_stricmp
_adjust_fdiv
_initterm
_strlwr
__dllonexit
?terminate@@YAXXZ
_except_handler3
strrchr
abort
atoi
wcscpy
strncpy
strchr
strstr
_wcsicmp
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
realloc
wcslen
wcsstr
_wcslwr
sprintf
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
HttpQueryInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpxCompress_a
UpxDecompress_a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ