DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
07151b3d6956ae57e8826f3370b388fc9dc0228c0e3f3556b42a79d12040053aN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07151b3d6956ae57e8826f3370b388fc9dc0228c0e3f3556b42a79d12040053aN.dll
Resource
win10v2004-20240802-en
Target
07151b3d6956ae57e8826f3370b388fc9dc0228c0e3f3556b42a79d12040053aN
Size
72KB
MD5
e0f04b8b14803daa90365e3d9b58e660
SHA1
12f0f91488f642caaaa1020b4043b07fb8541478
SHA256
07151b3d6956ae57e8826f3370b388fc9dc0228c0e3f3556b42a79d12040053a
SHA512
8348ab0d75faecf65413937e9a8b3eb339efcbe8df0e8483cb615a09d8f63b5d994d01859dfa133dc9df6fa9d60878ab6131766b4c28dbf39677af6242268106
SSDEEP
768:PiHWjZOkvBEwz5iPQWj7l0eMdlZc4X9+ucMf7c7jZajkBFcyJOtbI6XNYmAA:6HWNOk+wwPQi0Pdvh9+y+uREOtvd9b
Checks for missing Authenticode signature.
resource |
---|
07151b3d6956ae57e8826f3370b388fc9dc0228c0e3f3556b42a79d12040053aN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WritePrivateProfileStringA
GetModuleFileNameA
LocalFree
MoveFileA
SetFileAttributesA
CreateThread
CreateProcessA
GetSystemDirectoryA
RemoveDirectoryA
Sleep
Process32First
GetExitCodeProcess
WaitForSingleObject
CreateDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
lstrlenA
MultiByteToWideChar
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetCommandLineW
GetProcAddress
ExitProcess
lstrlenW
WideCharToMultiByte
LoadLibraryA
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
Process32Next
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegCreateKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strncmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
memcpy
_access
atoi
_wcslwr
wcsstr
memcmp
fopen
fseek
strstr
strrchr
sprintf
strlen
??3@YAXPAX@Z
memset
strcat
strcpy
strncpy
strchr
_strupr
strcmp
fclose
fread
??2@YAPAXI@Z
ftell
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ