DllMain
KcFontInstall
KcFontWizard
KcInstallFonts
KcRemovePackage
KcRunGetModuleStrings
KcRunModuleCount
Static task
static1
Behavioral task
behavioral1
Sample
35f4633f6e88dc2bec1ccd976165da743ff2e50d302c4a4aeaa4af87f7a24a4bN.dll
Resource
win7-20240903-en
Target
35f4633f6e88dc2bec1ccd976165da743ff2e50d302c4a4aeaa4af87f7a24a4bN
Size
183KB
MD5
46f261953feeb8e554aa464c758a6ea0
SHA1
646021fd7a4d74895c8112b6d2822b9cc9fd50e9
SHA256
35f4633f6e88dc2bec1ccd976165da743ff2e50d302c4a4aeaa4af87f7a24a4b
SHA512
427406f1285f5eeed666374ae720d61736f6571234a05af925f351b95cdf02efd046f28ba86e18f6a12a89198a2e76d52f8a53dc7d976d27f1274ea851ba9b62
SSDEEP
3072:JL2bPmjXhyBqkVKoCaERtXS5b0jj57I0YA2lQBV+UdE+rECWp7hK+8+Ew4u:B2AXh2qwIaE7e4jS09BV+UdvrEFp7hKE
Checks for missing Authenticode signature.
resource |
---|
35f4633f6e88dc2bec1ccd976165da743ff2e50d302c4a4aeaa4af87f7a24a4bN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WritePrivateProfileStringA
GetPrivateProfileStringA
GetWindowsDirectoryA
GetShortPathNameA
MoveFileExA
DeleteFileA
GetWindowsDirectoryW
FindClose
FindNextFileA
FindFirstFileA
GetSystemDirectoryW
GetSystemDirectoryA
GetACP
SetLastError
RemoveDirectoryA
GetModuleFileNameA
LocalAlloc
FreeLibrary
LoadLibraryA
GetExitCodeProcess
CreateProcessW
HeapSize
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
WriteFile
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
WinExec
GetSystemWindowsDirectoryA
SetFileAttributesA
CopyFileA
ReadFile
CreateFileW
CreateFileA
GetLastError
GetFileSize
CloseHandle
CreateThread
Sleep
GetVersionExA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
OutputDebugStringW
lstrcpyA
GetLocalTime
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
LCMapStringA
RaiseException
HeapAlloc
TlsFree
TlsSetValue
TlsAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
PostMessageA
LoadCursorA
RegisterClassA
GetDesktopWindow
SendMessageA
DrawTextExA
SetWindowLongA
ShowWindow
UpdateWindow
BringWindowToTop
GetWindowLongA
DefWindowProcA
BeginPaint
GetDC
GetClientRect
GetSysColor
DrawTextA
EndPaint
ReleaseDC
DestroyWindow
UnregisterClassA
wsprintfW
wvsprintfA
wsprintfA
CreateWindowExA
GetWindowRect
RemoveFontResourceA
AddFontResourceA
EnumFontFamiliesExA
GetStockObject
SetBkMode
CreateSolidBrush
SelectObject
CreatePen
DeleteObject
Rectangle
RegDeleteKeyA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
DllMain
KcFontInstall
KcFontWizard
KcInstallFonts
KcRemovePackage
KcRunGetModuleStrings
KcRunModuleCount
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ