DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c78cc1fcd1c512f7569cb903a66ca4e00ce4fd21434f2d90fef5bc3c12de8fdd.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c78cc1fcd1c512f7569cb903a66ca4e00ce4fd21434f2d90fef5bc3c12de8fdd.dll
Resource
win10v2004-20230703-en
Target
c78cc1fcd1c512f7569cb903a66ca4e00ce4fd21434f2d90fef5bc3c12de8fdd
Size
1.2MB
MD5
e80de9777c51b60968ece30ddf0fe0e5
SHA1
04440d01fe28f4019b5b3ae4953ebdc4dbf864a0
SHA256
c78cc1fcd1c512f7569cb903a66ca4e00ce4fd21434f2d90fef5bc3c12de8fdd
SHA512
3e654c3a1dd526449a21537098562b35aa2fcb0b5ca0b2a5859ebd83f639c449bed84d006b69978428d4aecc6c8958f6b15fb3e80b179756787b66ff3ea7db71
SSDEEP
24576:QMxKdRElGfvGf8lX3uNGavkg3Ny5rbbTyLrBAUZLY3:QM8i++SX3uNGaXuaLrBAUZLY3
Checks for missing Authenticode signature.
resource |
---|
c78cc1fcd1c512f7569cb903a66ca4e00ce4fd21434f2d90fef5bc3c12de8fdd |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
FlushFileBuffers
LoadLibraryW
GetTempPathW
GetTickCount
GetDriveTypeW
WaitForSingleObject
GetPrivateProfileStringW
InitializeCriticalSection
TerminateProcess
GetCurrentProcess
CreateFileW
CreateThread
GetExitCodeThread
GetCurrentProcessId
GetCurrentDirectoryW
GetCurrentThreadId
HeapFree
HeapAlloc
GetProcessHeap
SetEvent
OpenEventW
CreateEventW
WideCharToMultiByte
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingW
OpenFileMappingW
GetACP
CompareStringW
WriteConsoleW
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
CloseHandle
GetVersionExW
MoveFileExW
WritePrivateProfileStringW
DeleteFileW
GetFileAttributesW
FindClose
GetThreadLocale
SetThreadLocale
LocalFree
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrcmpiW
GetModuleHandleW
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
lstrlenW
GetTempFileNameW
GetComputerNameA
Sleep
GetFileType
SetHandleCount
HeapReAlloc
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
GetStringTypeW
ExitProcess
HeapSize
GetStdHandle
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
IsValidCodePage
GetOEMCP
FlsAlloc
SetLastError
FlsFree
FlsGetValue
GetCPInfo
FindFirstFileExW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
FlsSetValue
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
SetEnvironmentVariableA
SendMessageW
FindWindowW
CharNextW
RegCreateKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetNamedSecurityInfoA
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoA
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
SysFreeString
VariantInit
VariantClear
SysAllocString
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ