DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
a07657e680dfd39d619f621efca861c95b5cb82f06560a60b9ab5757bb430345.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a07657e680dfd39d619f621efca861c95b5cb82f06560a60b9ab5757bb430345.dll
Resource
win10v2004-20230915-en
Target
a07657e680dfd39d619f621efca861c95b5cb82f06560a60b9ab5757bb430345
Size
205KB
MD5
e73d24116bc9d811ca232dc8a718a3ab
SHA1
b0b511f5042c87332ae85b50ca3749b6802daa26
SHA256
a07657e680dfd39d619f621efca861c95b5cb82f06560a60b9ab5757bb430345
SHA512
eb9f389ff1f48e5b4e3bfc371b8b3b35842efa739e93061f10e68aab3cc15be28895417b99ae4188e4eebb23385f2490fbb5aa08129eb0bc1b2e9658fef53d12
SSDEEP
3072:d7FBrxYTotEc04Nt9vfbqaN9KdOIMMgBepQ6pNDuuptCNtIvJ9XLeFeMCJCz:fBz9Nt9vfbb9xVMgkzL1pItIDCz
Checks for missing Authenticode signature.
resource |
---|
a07657e680dfd39d619f621efca861c95b5cb82f06560a60b9ab5757bb430345 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
GetWindowsDirectoryW
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
QueryFullProcessImageNameW
AllocConsole
VirtualQuery
LoadLibraryExW
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
HeapSize
GetStringTypeW
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
LoadLibraryW
HeapReAlloc
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
SetEndOfFile
SetStdHandle
MultiByteToWideChar
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetStdHandle
LCMapStringW
HeapFree
FreeConsole
CloseHandle
DisableThreadLibraryCalls
SetEvent
GetLastError
CreateEventW
OpenProcess
GetSystemDirectoryW
CreateFileW
CompareStringOrdinal
GetModuleFileNameW
GetModuleHandleExW
SetLastError
HeapAlloc
ExitProcess
DecodePointer
GetFileType
RaiseException
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
VirtualProtect
ReadFile
FindClose
CreateDirectoryW
InterlockedFlushSList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetParent
SystemParametersInfoW
RegisterWindowMessageW
GetAncestor
GetWindowTextW
InvalidateRect
SendMessageW
RedrawWindow
GetWindowLongW
GetMenuItemInfoW
GetClassWord
PostMessageW
FindWindowExW
GetWindowRect
GetPropW
GetMenuItemCount
CreateWindowExW
RemovePropW
TrackPopupMenu
SetMenuItemInfoW
EnumPropsA
MapWindowPoints
SendNotifyMessageW
SetPropW
FindWindowW
GetClassNameW
SetWindowLongW
GetSystemMetricsForDpi
RegDeleteKeyValueW
RegGetValueW
RegOpenKeyExW
CheckTokenMembership
RegNotifyChangeKeyValue
RegCloseKey
AllocateAndInitializeSid
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
FreeSid
SHGetFolderPathW
PathStripPathW
PathFileExistsW
SetWindowThemeAttribute
ord410
ord412
ord413
DwmExtendFrameIntoClientArea
DwmSetWindowAttribute
ImageDirectoryEntryToDataEx
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ