DllCanUnloadNow
DllDoFun
DllGetClassObject
DllRegister
DllUnRegister
Static task
static1
Behavioral task
behavioral1
Sample
33dac95f95b63496d20f133ba74fdf2d4931f792887d52fc2611c7defc9516f9.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
33dac95f95b63496d20f133ba74fdf2d4931f792887d52fc2611c7defc9516f9.dll
Resource
win10v2004-20230221-en
Target
33dac95f95b63496d20f133ba74fdf2d4931f792887d52fc2611c7defc9516f9
Size
204KB
MD5
efde6caf22c4e70667b2ea86dca01673
SHA1
620d10187f42250d4394b1dd993a38f7fb9fa076
SHA256
33dac95f95b63496d20f133ba74fdf2d4931f792887d52fc2611c7defc9516f9
SHA512
649824c6ba3de145360054f6ef1c7811b7376e4217f7908ad679fd0ede30af82ec95151d1b1d4df203eaf282bf5d09546025d519acbadad56df66632a6acd740
SSDEEP
6144:Q+6BHrjWOoJexcHlnp7/Wp9iBMxiUuPkBkPCzqYj/G:Q+PFnpTWGBMb6bgG
Checks for missing Authenticode signature.
resource |
---|
33dac95f95b63496d20f133ba74fdf2d4931f792887d52fc2611c7defc9516f9 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
FlushFileBuffers
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
GetCurrentProcessId
TerminateProcess
MultiByteToWideChar
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoA
IsValidCodePage
GetVersionExW
lstrcmpiA
GetSystemTimeAsFileTime
ReadFile
WriteFile
GetModuleHandleW
Sleep
GetCurrentThreadId
GetSystemDirectoryW
GetLastError
GetCurrentProcess
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryW
OpenEventW
SetEvent
CreateThread
CloseHandle
WaitForSingleObject
CreateEventW
GetModuleFileNameW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoW
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeA
EnumSystemLocalesA
HeapDestroy
HeapCreate
HeapSetInformation
SetFilePointer
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ExitProcess
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetStdHandle
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
SetHandleCount
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx
CoInitializeSecurity
VariantInit
VariantClear
SysAllocString
SysFreeString
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
DllCanUnloadNow
DllDoFun
DllGetClassObject
DllRegister
DllUnRegister
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ