DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d0075f2507472cf2b246c2576341f5f0N.dll
Resource
win7-20240903-en
Target
d0075f2507472cf2b246c2576341f5f0N.exe
Size
72KB
MD5
d0075f2507472cf2b246c2576341f5f0
SHA1
741e3bec0f78579e60be7bfb78e65946a1e81a6c
SHA256
3b38fa440b2eda83ef64addba50f152daea4be12cea91c26ebcd186b5d869dd5
SHA512
a5825696e360b014751fa03e46d9f39c749291c0d6869ef183d2020d8b197e41565a487009f094988b9d88451be0b4bdd870f3668d39227e7e27dc1c25f6bf6c
SSDEEP
1536:+RHodZPNVDBIsUOVQVeIulseXhjJ/0ImL9I2Et:tBD9yVUlseJme2E
Checks for missing Authenticode signature.
resource |
---|
d0075f2507472cf2b246c2576341f5f0N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
Process32Next
Process32First
FreeLibrary
SetFileAttributesA
CreateThread
MoveFileA
WritePrivateProfileStringA
CreateDirectoryA
GetModuleFileNameA
WaitForSingleObject
GetExitCodeProcess
GetCurrentProcessId
RemoveDirectoryA
CreateProcessA
Sleep
CloseHandle
LocalFree
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
GetCommandLineW
ExitProcess
WideCharToMultiByte
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
GetNamedSecurityInfoA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_access
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
memcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
strstr
strrchr
sprintf
strlen
memset
strcat
strcpy
atoi
strchr
_strupr
strcmp
strncpy
strncmp
memcpy
_purecall
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ