DllCanUnloadNow
DllDoFun
DllGetClassObject
DllRegister
DllUnRegister
Static task
static1
Behavioral task
behavioral1
Sample
cf6d28d074da70f2d10cd0f251e0cab92e7d2b3ec19780039e08007c3fd49182.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cf6d28d074da70f2d10cd0f251e0cab92e7d2b3ec19780039e08007c3fd49182.dll
Resource
win10v2004-20230220-en
Target
cf6d28d074da70f2d10cd0f251e0cab92e7d2b3ec19780039e08007c3fd49182
Size
172KB
MD5
d3a40aca4a0dad6d134bb2e75117fa0e
SHA1
27f9716f4b63bf0eb53114f648da23fd9da17684
SHA256
cf6d28d074da70f2d10cd0f251e0cab92e7d2b3ec19780039e08007c3fd49182
SHA512
2ef2d7a75d3612f4568fa2b6a2c1d16c46071ecf122715b358c3363807af237ada1fc2c50eca7727a3b976d91139e40f70969027c1fed55f76ff33a87b45a6ed
SSDEEP
3072:fsJkqtfRRBCxzF4HKPHJddCs/gtl9C9nbCu64aaDU:CAxzF6KhddCFtlgnbC4pD
Checks for missing Authenticode signature.
resource |
---|
cf6d28d074da70f2d10cd0f251e0cab92e7d2b3ec19780039e08007c3fd49182 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
VirtualFree
FlushFileBuffers
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
GetCurrentProcessId
TerminateProcess
MultiByteToWideChar
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoA
IsValidCodePage
GetVersionExW
lstrcmpiA
GetSystemTimeAsFileTime
ReadFile
WriteFile
GetModuleHandleW
Sleep
GetSystemDirectoryW
GetCurrentThreadId
GetLastError
GetCurrentProcess
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedDecrement
OpenEventW
SetEvent
CreateThread
CloseHandle
WaitForSingleObject
CreateEventW
GetModuleFileNameW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoW
HeapSize
GetModuleHandleA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeA
EnumSystemLocalesA
HeapReAlloc
HeapDestroy
HeapCreate
SetFilePointer
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetStdHandle
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
SetHandleCount
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx
CoInitializeSecurity
VariantInit
VariantClear
SysAllocString
SysFreeString
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
DllCanUnloadNow
DllDoFun
DllGetClassObject
DllRegister
DllUnRegister
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ