DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
accf76e9d7b5c6f1a3569a29b0bc219a2c453385a300344690d0fd51245ab52dN.dll
Resource
win7-20240903-en
Target
accf76e9d7b5c6f1a3569a29b0bc219a2c453385a300344690d0fd51245ab52dN
Size
60KB
MD5
09a2ca540bc1bd2b7bfd02ff595f4270
SHA1
7f2683679d13e203203efabef5b43a012b32ec35
SHA256
accf76e9d7b5c6f1a3569a29b0bc219a2c453385a300344690d0fd51245ab52d
SHA512
6301012c1e195c3162f74d8b4358dc4a97544eca5b3df93039cc5daa57f53746c9da3def6100ba74e5432f4984831905d9756dfc7a4f42c3e1210c007db9386f
SSDEEP
1536:WqUtXuEf6t6t071tdeN5dbbm6FdiHGWfYSpWhiFPZoe:AuEf6wt0HAm6bLgWcrV
Checks for missing Authenticode signature.
resource |
---|
accf76e9d7b5c6f1a3569a29b0bc219a2c453385a300344690d0fd51245ab52dN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
SetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
WritePrivateProfileStringA
MoveFileA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetProcAddress
RemoveDirectoryA
LoadLibraryA
FreeLibrary
DeleteFileA
ExitProcess
GetCurrentProcessId
GetCommandLineW
LocalFree
CreateThread
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
Sleep
CloseHandle
WideCharToMultiByte
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
ftell
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
strcmp
_wcslwr
wcsstr
memcmp
_purecall
??3@YAXPAX@Z
memset
sprintf
_access
strcat
strlen
strstr
??2@YAPAXI@Z
fclose
fread
_strlwr
fseek
fopen
strrchr
strcpy
memcpy
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ