DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
PStoreCreateInstance
PStoreEnumProviders
Static task
static1
Behavioral task
behavioral1
Sample
pstorec.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
pstorec.dll
Resource
win10v2004-20230220-en
Target
pstorec.dll
Size
42KB
MD5
46cbb93e2009b9c809b4788198dfe528
SHA1
5103de38f1faa595f2fa5baf34b11232aa70c89c
SHA256
d130ed288a7dd6567d0ea9467e1c261034b301b57e8039f8bc39e3e5959d8f18
SHA512
b4cb71b4d4589d723747ac04fc2c8f70341e779513ae125246f0beee8f6e4ca4b605209673d6b319bfa30a098268b503cb3909f934770d7efa3a7e8ace513877
SSDEEP
768:aaP9Wh99mvYPFpUA504DqSYbVdZgzeLy:aQW74vYPcA64+Ss1gzm
Checks for missing Authenticode signature.
resource |
---|
pstorec.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
??2@YAPAXI@Z
malloc
free
_except_handler3
_wcsicmp
_adjust_fdiv
_initterm
??3@YAXPAX@Z
ord32
ord15
ord22
ord18
ord21
ord16
DuplicateHandle
OpenEventA
CreateEventA
WaitForSingleObject
CreateProcessA
SetLastError
lstrcmpiA
GetModuleFileNameA
GetModuleHandleA
GetCurrentThread
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
lstrlenW
DisableThreadLibraryCalls
LoadLibraryA
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
GetLocalTime
GetTimeFormatA
GetDateFormatA
OutputDebugStringA
GetFileSize
SetFilePointer
SetEndOfFile
WriteFile
Sleep
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
CreateFileW
LocalFree
LocalAlloc
LoadLibraryW
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
GetModuleFileNameW
GetVersionExA
QueryServiceStatus
StartServiceA
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceConfigA
LockServiceDatabase
ChangeServiceConfigA
UnlockServiceDatabase
StartServiceW
RegEnumValueW
RegEnumValueA
RegCreateKeyExW
RegQueryValueExW
FreeSid
AllocateAndInitializeSid
CloseServiceHandle
RegEnumKeyExA
EqualSid
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetTokenInformation
OpenProcessToken
LoadStringA
wsprintfA
StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc
RpcStringFreeW
RpcBindingFree
RpcStringBindingComposeW
RpcBindingFromStringBindingW
NdrClientCall2
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
PStoreCreateInstance
PStoreEnumProviders
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ