DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7289d0ceb8ebf7ef531c6880db09c0933d0f3f83975634d4b62d73a004842067.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7289d0ceb8ebf7ef531c6880db09c0933d0f3f83975634d4b62d73a004842067.dll
Target
7289d0ceb8ebf7ef531c6880db09c0933d0f3f83975634d4b62d73a004842067
Size
64KB
MD5
46a9371bf169609a7536df3cad2ccf72
SHA1
4f1273c64d07c2fa1d05a42e05d9f23afaadde73
SHA256
7289d0ceb8ebf7ef531c6880db09c0933d0f3f83975634d4b62d73a004842067
SHA512
fdddebd5e1f4394937db85ee8170734bbd9f201ff63d01508ddcd51e22d5b832a901cc8ee0b8f3c9e791da678aed92dd8819336086f76cb252c2d2b8cb9270d6
SSDEEP
1536:E9lyAnK+eh0F027UbudTD149tTpCz8XN3Ox0x7YL8N7R:EzyAnK+Og02oUHItVb9gc88xR
Checks for missing Authenticode signature.
resource |
---|
7289d0ceb8ebf7ef531c6880db09c0933d0f3f83975634d4b62d73a004842067 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
URLDownloadToCacheFileA
ord825
ord537
ord800
ord858
ord535
ord823
ord4202
ord2915
ord860
ord4277
ord4129
ord2818
ord941
ord540
ord4278
ord924
ord922
ord926
ord939
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_purecall
memcmp
_mbslwr
_mbsstr
__CxxFrameHandler
atoi
srand
time
strlen
_mbscmp
strtok
memset
strcpy
strcmp
strncpy
free
memcpy
realloc
malloc
strstr
GetLastError
lstrcmpiA
GetCurrentThreadId
lstrlenW
WideCharToMultiByte
lstrlenA
GetShortPathNameA
lstrcpyA
DeleteFileA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcatA
GetModuleHandleA
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
FreeLibrary
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
EnumThreadWindows
IsWindow
CharNextA
GetClassNameA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteKeyA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
SysStringLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
SysAllocString
SysFreeString
?open@ifstream@@QAEXPBDHH@Z
?read@istream@@QAEAAV1@PADH@Z
?close@ifstream@@QAEXXZ
??1ifstream@@UAE@XZ
??1ios@@UAE@XZ
??0ifstream@@QAE@XZ
??_Difstream@@QAEXXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ