DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
NSCanUnload
NSGetFactory
NSRegisterSelf
NSUnregisterSelf
Static task
static1
Behavioral task
behavioral1
Sample
5230228ec2001678ef4fb2a40e0f15c0N.dll
Resource
win7-20240704-en
Target
5230228ec2001678ef4fb2a40e0f15c0N.exe
Size
180KB
MD5
5230228ec2001678ef4fb2a40e0f15c0
SHA1
025ccd8f71ca6b20c2fe9b555d7b8ecd3069ae88
SHA256
6603c0a62d2e2ade7844584f944ad760ef4a77cb72f99fe2f617eb9012dbc785
SHA512
ddbee959a95d1de0f1ad15759277fcc5806310d56d2009469719bf4552ce053191aafd6a1a777904e6a8fa8792f5f9bd9f4659edebbfe103b782b6afce1ef2b2
SSDEEP
3072:UGUGCp29KzlcmDs2U0ezrcRqwGamSRLkPmEZpVarH/43ZJiObv:NC7zlcmDs2U03RHzUbVaU3JT
Checks for missing Authenticode signature.
resource |
---|
5230228ec2001678ef4fb2a40e0f15c0N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
CreateMutexA
OpenEventA
GetModuleHandleA
CreateEventA
GetCurrentProcessId
lstrcatA
CreateProcessA
GetCurrentThreadId
CloseHandle
ReleaseMutex
GetModuleFileNameA
lstrlenA
LoadLibraryA
GetLastError
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
lstrcmpiA
EnterCriticalSection
MultiByteToWideChar
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
DisableThreadLibraryCalls
FlushInstructionCache
GetCurrentProcess
WideCharToMultiByte
lstrlenW
DrawTextA
FillRect
ReleaseDC
SetWindowPos
SetDlgItemTextA
GetDlgItem
SetWindowLongA
CallWindowProcA
GetDC
MessageBoxA
DialogBoxParamA
RegisterClassExA
wsprintfA
CreateWindowExA
GetWindowLongA
LoadCursorA
EqualRect
OffsetRect
SetWindowRgn
IsChild
DefWindowProcA
SetFocus
ShowWindow
GetFocus
GetParent
UnionRect
PtInRect
DestroyWindow
InvalidateRect
IsWindow
EndPaint
BeginPaint
GetClientRect
EndDialog
GetClassInfoExA
LoadStringA
GetKeyState
IntersectRect
RestoreDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
CreateDCA
CreateRectRgnIndirect
DeleteDC
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
CoTaskMemFree
OleLoadFromStream
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
CLSIDFromString
CoUninitialize
CoInitialize
SysStringByteLen
VariantChangeType
OleCreatePropertyFrame
VariantClear
SysFreeString
SysAllocString
SysAllocStringByteLen
getenv
memcmp
strcat
sprintf
??2@YAPAXI@Z
_EH_prolog
_except_handler3
strstr
_local_unwind2
__CxxFrameHandler
??3@YAXPAX@Z
free
_purecall
memcpy
memset
_strdup
_initterm
malloc
_adjust_fdiv
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
NSCanUnload
NSGetFactory
NSRegisterSelf
NSUnregisterSelf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE