DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d1bbb588b2d21a0d9dbdf1c390d19eca8d88f2d986dab19dbd7da74ebe9b85e5.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d1bbb588b2d21a0d9dbdf1c390d19eca8d88f2d986dab19dbd7da74ebe9b85e5.dll
Resource
win10v2004-20230824-en
Target
d1bbb588b2d21a0d9dbdf1c390d19eca8d88f2d986dab19dbd7da74ebe9b85e5
Size
652KB
MD5
59dc90c2e0d9afc50630205fc94a7f30
SHA1
c4de75cff5ebe1a6d9ca7f611372bea0a8a47df5
SHA256
d1bbb588b2d21a0d9dbdf1c390d19eca8d88f2d986dab19dbd7da74ebe9b85e5
SHA512
de91c71fc55b2c2c6996d77bd91c1b94d524ead4fac069a131ddaecdceee929cf6669ebc3e32548a52e187fc53ff9d25bb9f1aae50a3b538937089e03c29e2ef
SSDEEP
12288:EM2eMekwo6mRTHIyee3fMu1cLXSoIv13jeov:ieMek9hTHcyf0LX
Checks for missing Authenticode signature.
resource |
---|
d1bbb588b2d21a0d9dbdf1c390d19eca8d88f2d986dab19dbd7da74ebe9b85e5 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DisableThreadLibraryCalls
EnumResourceNamesW
FileTimeToLocalFileTime
FindResourceW
GetDateFormatW
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
SizeofResource
WideCharToMultiByte
_vsnprintf
SystemFunction036
CLSIDFromProgID
CoGetClassObject
CoTaskMemFree
LoadRegTypeLib
SafeArrayAccessData
SafeArrayCopy
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_assert
_ltow_s
_strdup
_wcsicmp
_wcsnicmp
acos
asin
atan
atan2
bsearch
cos
exp
floor
fmod
free
fwrite
getenv
isalnum
iswalnum
iswalpha
iswspace
log
log10
malloc
memcmp
memcpy
memmove
memset
pow
sin
sqrt
strchr
strcmp
strcpy
strcspn
strlen
tan
towlower
towupper
wcschr
wcscmp
wcsncmp
wcsstr
wcstol
LoadStringW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ