DllMain
FindFolder
NullFolder
Static task
static1
Behavioral task
behavioral1
Sample
54ded1053ba5a1adcf6b2fb943b2657071e03de5120c6cee2522398022b27aa4.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
54ded1053ba5a1adcf6b2fb943b2657071e03de5120c6cee2522398022b27aa4.dll
Resource
win10v2004-20230703-en
Target
54ded1053ba5a1adcf6b2fb943b2657071e03de5120c6cee2522398022b27aa4
Size
595KB
MD5
31cd39e701eec7a1890a52131bba53c1
SHA1
330a7d874f6cd34f4634aa355b9efeca27c55b79
SHA256
54ded1053ba5a1adcf6b2fb943b2657071e03de5120c6cee2522398022b27aa4
SHA512
afdc2e295b8e1a1328479bef9e17a02b07718c15309a8aaee8f7e16c977060b8d7da0d0f81aab78f6fb0786f8e829ce4b606242e3a20d6b88b2c5e571ae0f7c0
SSDEEP
12288:REHmEYPwzGv6V+VU1jZXcnkBJF8ot2C7qkB:REHmvuq6R1jZsnkB/2
Checks for missing Authenticode signature.
resource |
---|
54ded1053ba5a1adcf6b2fb943b2657071e03de5120c6cee2522398022b27aa4 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
GetEnvironmentVariableA
SetEnvironmentVariableA
GetLocaleInfoA
MultiByteToWideChar
GlobalLock
LocalFree
WideCharToMultiByte
FormatMessageA
GlobalUnlock
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileSectionA
GlobalHandle
ExpandEnvironmentStringsA
GetTimeFormatA
GetFinalPathNameByHandleA
CreateFileA
GetUserDefaultLCID
GetDateFormatA
GlobalFree
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLocalTime
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
ReadFile
CloseHandle
GetVersionExA
LoadLibraryA
GetLastError
CompareStringA
GetDiskFreeSpaceA
OpenProcess
GetVolumeInformationA
SetErrorMode
GetProcAddress
CompareFileTime
GetFileAttributesExA
FindFirstFileA
FindNextFileA
GetFullPathNameA
OpenFile
InitializeCriticalSectionEx
FindClose
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTempPathA
DecodePointer
GetLongPathNameA
GetTempFileNameA
WriteFile
SetFilePointer
CreateDirectoryA
HeapFree
lstrlenA
HeapAlloc
GetProcessHeap
GetDriveTypeA
GetCurrentProcess
GetModuleFileNameA
SetEvent
DebugBreak
OutputDebugStringW
RaiseException
UnhandledExceptionFilter
CharLowerA
CharUpperA
OemToCharA
CharToOemA
CharUpperBuffA
GetAsyncKeyState
MessageBeep
LoadStringA
MessageBoxA
PeekMessageA
PostQuitMessage
IsCharAlphaNumericA
IsClipboardFormatAvailable
UnregisterClassA
GetClipboardData
CloseClipboard
SendMessageA
OpenClipboard
GetKeyboardLayout
GetFileSecurityA
OpenProcessToken
DuplicateToken
MapGenericMask
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
GetUserNameA
AccessCheck
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderPathA
UrlCreateFromPathA
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?fail@ios_base@std@@QBE_NXZ
?eof@ios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?gcount@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QBE_JXZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?bad@ios_base@std@@QBE_NXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
memmove
memcpy
__std_type_info_destroy_list
__CxxFrameHandler3
__std_terminate
_purecall
strchr
strstr
strrchr
__std_exception_destroy
__std_exception_copy
_except_handler4_common
__current_exception
__current_exception_context
memset
_CxxThrowException
strtol
_itoa
wcstombs
strtod
mbstowcs
_ecvt_s
atoi
atof
getenv
_strdup
_strnicmp
isdigit
strncpy
isalpha
tolower
islower
_stricmp
strpbrk
toupper
strncmp
isxdigit
_memicmp
_strrev
isupper
isalnum
setvbuf
ungetc
fgetc
fflush
fputc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
ferror
fgetpos
_getcwd
_write
_wfopen_s
__stdio_common_vsnprintf_s
_ftelli64
fopen_s
fopen
fclose
__stdio_common_vsprintf_s
__stdio_common_vsprintf
fwrite
_ctime64
_time64
qsort
srand
malloc
free
_callnewh
_recalloc
_initterm
_initialize_narrow_environment
terminate
_cexit
_set_invalid_parameter_handler
_seh_filter_dll
_crt_at_quick_exit
_invalid_parameter_noinfo_noreturn
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo
_register_onexit_function
_initialize_onexit_table
_initterm_e
_configure_narrow_argv
_errno
remove
_unlock_file
_chdrive
_chdir
_chmod
_stat64i32
_lock_file
_isnan
floor
_CIfmod
_except1
_finite
ceil
CoCreateInstance
DllMain
FindFolder
NullFolder
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ