AddIn_FileTime
AddIn_SystemTime
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
JQx2JJIN1P3qE7TtPN4Kidll.dll
Resource
win7-20230621-en
Target
JQx2JJIN1P3qE7TtPN4Kidll.dll
Size
356KB
MD5
ee6eca8789ec62963bc4f94ed648b5ae
SHA1
81e0abb8cc8f759cf8ef5f16bffb12d56eeada5e
SHA256
49e98d72c3b13595b23f6620d91d3bd432216ba2f58491abb64a84e6bb99073b
SHA512
2e6aa1ebedd20932039f605882479a4ec72e2b9e3180e23d14a1e0e99682e99144406322b1ae165cd7665fb0ab83cdf176a1fe319b81ab022de69c389bd6324e
SSDEEP
3072:JI0AM0yQkR9M6lglELtJUNjiWGyWcTX0JUiA2tqZ4IvUlDAj7UOjVifSwHEDQVLK:i5MR9M6y3TCRIvgMSS3AyUrhYu3j
Checks for missing Authenticode signature.
Processes:
resource |
---|
JQx2JJIN1P3qE7TtPN4Kidll.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetTimeFormatA
GetDateFormatA
GetThreadLocale
FileTimeToSystemTime
VirtualAlloc
ExitProcess
CloseHandle
CreateFileW
SetStdHandle
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EncodePointer
FlsGetValue
FlsAlloc
FlsFree
SetLastError
GetLastError
HeapSize
HeapValidate
IsBadReadPtr
DecodePointer
GetProcAddress
GetModuleHandleW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapAlloc
GetModuleFileNameW
HeapReAlloc
HeapQueryInformation
HeapFree
WriteFile
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
RaiseException
RtlPcToFileHeader
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
MessageBoxA
CoTaskMemFree
CoTaskMemAlloc
CoLoadLibrary
AddIn_FileTime
AddIn_SystemTime
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ