DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d79570801853a67735b93e2fd8ad045c7f365d289c65c9055839360e2719fa5.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5d79570801853a67735b93e2fd8ad045c7f365d289c65c9055839360e2719fa5.dll
Resource
win10v2004-20230703-en
Target
5d79570801853a67735b93e2fd8ad045c7f365d289c65c9055839360e2719fa5
Size
445KB
MD5
31ca7d9fc8b904a1ef0d0069dbb034ac
SHA1
bcfcde2428f4676d0c5c757cdea3be32b4108859
SHA256
5d79570801853a67735b93e2fd8ad045c7f365d289c65c9055839360e2719fa5
SHA512
c394ab7dc07bf28c7fb3d0a05084b8fe624850a6e4b7dae829162583de08331bdd035c4d50762eeb772cf7a4a384f747ae8b793a3566e639d64c057476e51268
SSDEEP
6144:ThtzIpBZxUrFvFaM0yaMZq0qLAZ+oHkCxzy3D:Vtz4KC1MDwAZ+kgD
Checks for missing Authenticode signature.
resource |
---|
5d79570801853a67735b93e2fd8ad045c7f365d289c65c9055839360e2719fa5 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?TestAudioRecordDevice@audioDeviceTest@@YGHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetAudioPlayOutDeviceList@audioDeviceTest@@YGHAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?GetAudioRecordDeviceList@audioDeviceTest@@YGHAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?StopTestAudioDevice@audioDeviceTest@@YGHXZ
?InitAudioDeviceTest@audioDeviceTest@@YGHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?TestAudioPlayOutDevice@audioDeviceTest@@YGHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RelaseAudioDeviceTest@audioDeviceTest@@YGHXZ
ord14281
ord7667
ord7296
ord995
ord1466
ord7341
ord5012
ord8308
ord12697
ord1103
ord6669
ord7508
ord8614
ord6686
ord12898
ord8652
ord8208
ord450
ord1063
ord362
ord2478
ord3906
ord6662
ord6443
ord3831
ord2256
ord6363
ord9855
ord10210
ord10835
ord11251
ord11949
ord8878
ord10844
ord11218
ord10326
ord4041
ord3354
ord3353
ord3117
ord6096
ord13537
ord2716
ord3787
ord14357
ord12032
ord9090
ord3216
ord5668
ord10086
ord9048
ord3615
ord1377
ord862
ord2267
ord7468
ord7214
ord8554
ord1691
ord12734
ord8204
ord2396
ord2963
ord305
ord5801
ord2944
ord14343
ord5773
ord14345
ord9197
ord12343
ord5667
ord5840
ord6648
ord3883
ord2553
ord12485
ord1832
ord8752
ord10232
ord10106
ord12665
ord3327
ord10851
ord11027
ord13422
ord3257
ord2817
ord11843
ord5081
ord7655
ord11728
ord10286
ord10288
ord4925
ord5161
ord12573
ord8155
ord10184
ord10183
ord10556
ord10134
ord10995
ord9830
ord9332
ord9888
ord11184
ord11039
ord11044
ord11049
ord10178
ord11003
ord11002
ord10193
ord10192
ord10191
ord10130
ord10235
ord11344
ord10159
ord10114
ord8804
ord10583
ord10131
ord10101
ord10100
ord11475
ord9873
ord8850
ord8825
ord8813
ord10394
ord10396
ord10393
ord8990
ord9966
ord11248
ord9022
ord11191
ord11159
ord3954
ord6009
ord9574
ord5083
ord6098
ord13541
ord3256
ord3253
ord8055
ord2717
ord8595
ord10120
ord12882
ord10117
ord10121
ord5536
ord11546
ord11547
ord8977
ord11907
ord3785
ord11756
ord14356
ord8803
ord12038
ord6844
ord10831
ord9094
ord3217
ord13658
ord12077
ord12075
ord1706
ord1718
ord4425
ord5761
ord3746
ord1065
ord6374
ord8966
ord3100
ord4170
ord8585
ord2946
ord3821
ord1128
ord6426
ord12374
ord5306
ord5005
ord13914
ord1061
ord6367
ord6007
ord8964
ord3098
ord4167
ord6436
ord5303
ord13094
ord9213
ord3765
ord1645
ord1726
ord1722
ord1731
ord4863
ord4904
ord4871
ord4883
ord4879
ord4875
ord4912
ord4900
ord4867
ord4916
ord4889
ord4851
ord4858
ord4893
ord4450
ord9528
ord4442
ord3008
ord14369
ord7771
ord14367
ord6745
ord11538
ord13488
ord5814
ord2638
ord11942
ord3322
ord3321
ord301
ord12577
ord8600
ord13059
ord13058
ord5137
ord5434
ord5644
ord1504
ord13743
ord8327
ord14228
ord4613
ord14194
ord14188
ord7757
ord5206
ord8195
ord5731
ord5698
ord13335
ord13436
ord7920
ord2339
ord1442
ord9187
ord5657
ord5140
ord5294
ord8065
ord10085
ord12963
ord6378
ord300
ord11986
ord3890
ord3584
ord1649
ord12506
ord1523
ord8349
ord14373
ord13908
ord14009
ord9174
ord3782
ord9290
ord11069
ord4085
ord4823
ord7836
ord1180
ord554
ord1355
ord829
ord2280
ord2265
ord2211
ord7305
ord7303
ord7462
ord7195
ord2152
ord2153
ord1524
ord4728
ord1375
ord859
ord266
ord265
ord1444
ord973
ord8311
ord8229
ord12677
ord8167
ord5241
ord2442
ord12355
ord12356
ord14368
ord7770
ord14366
ord9234
ord4100
ord4039
ord12759
ord7789
ord1985
ord11802
ord11803
ord14240
ord12345
ord7848
ord14440
ord6225
ord14442
ord6227
ord14441
ord6226
ord3801
ord5797
ord12057
ord12065
ord8062
ord10264
ord12069
ord12037
ord12740
ord5136
ord5433
ord5643
ord9186
ord5409
ord5646
ord5139
ord5295
ord5119
ord6006
ord7574
ord7575
ord7565
ord5293
ord8064
ord10083
ord9047
ord6633
ord2283
ord14309
ord2199
ord2271
ord1047
ord324
ord4536
ord1521
ord971
ord3646
ord1455
ord997
ord6723
ord6000
ord12066
ord10265
ord12741
ord4539
ord10302
ord14361
ord11990
ord5672
ord10088
ord6408
ord12897
ord6366
ord358
ord4822
ord7348
ord458
ord1106
ord10118
ord4764
ord316
ord7844
ord10119
ord2476
ord3798
ord1505
ord325
ord1048
ord2317
ord2364
ord2367
ord2330
ord2366
ord485
ord2221
ord2328
ord2136
ord2252
ord2355
ord1041
ord310
ord1463
ord990
ord1502
ord2341
ord2345
_CxxThrowException
memcpy
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
__CxxFrameHandler3
memset
malloc
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
strpbrk
_wassert
_errno
free
strftime
strspn
strncmp
strstr
strcspn
strchr
isxdigit
isupper
isspace
ispunct
islower
isgraph
isdigit
iscntrl
isalpha
isalnum
fflush
setvbuf
fsetpos
fgetpos
_fseeki64
memcpy_s
fwrite
_unlock_file
_lock_file
tolower
sscanf
isprint
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
ungetc
fputc
fgetc
fclose
fprintf
fopen
printf
sprintf
?terminate@@YAXXZ
atof
atoi
strrchr
memchr
sprintf_s
_localtime64_s
_time64
_purecall
memmove
_except1
OpenMutexA
CreateMutexA
ReleaseMutex
GetComputerNameA
CreateDirectoryA
SetFileAttributesA
QueryPerformanceCounter
GetLocalTime
GetPrivateProfileStringA
GetFileAttributesA
GetCurrentThreadId
Process32Next
DecodePointer
lstrlenA
LocalAlloc
LocalFree
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
Beep
TerminateThread
CreateEventA
CloseHandle
WaitForSingleObject
Sleep
CreateThread
FindClose
FindFirstFileA
InterlockedDecrement
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLastError
OutputDebugStringW
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringA
SetEvent
InvalidateRect
CopyRect
SetWindowRgn
InflateRect
DrawStateA
wsprintfA
ScreenToClient
GetSystemMetrics
ReleaseDC
GetWindowDC
GetClientRect
LoadImageA
EnableWindow
MessageBoxA
FillRect
SendMessageA
IsWindowVisible
IsWindow
PostMessageA
GetWindowRect
SetTimer
KillTimer
GetWindowTextA
DrawFocusRect
SetRect
PatBlt
GetTextExtentPoint32A
RoundRect
CreateRoundRectRgn
CreatePen
CreateSolidBrush
CreateFontIndirectA
GetStockObject
BitBlt
CreatePalette
GetDIBColorTable
CreateCompatibleDC
CreateHalftonePalette
GetObjectA
Ellipse
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderPathA
_TrackMouseEvent
CoTaskMemAlloc
CoTaskMemFree
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantClear
VariantChangeType
LoadRegTypeLi
_Cnd_init
_Mtx_unlock
_Mtx_lock
_Mtx_init
_Thrd_join
?_Throw_C_error@std@@YAXH@Z
_Xtime_get_ticks
?_Syserror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
_Cnd_signal
_Cnd_destroy
_Mtx_destroy
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
_Thrd_equal
_Mtx_current_owns
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?_BADOFF@std@@3_JB
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Winerror_map@std@@YAPBDH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
_Cnd_timedwait
WSAStartup
inet_addr
htons
htonl
shutdown
closesocket
WSACleanup
socket
bind
setsockopt
select
WSAGetLastError
__WSAFDIsSet
recv
send
connect
sendto
getsockname
recvfrom
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ