DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d0d59d93ac093d98ef2d8d5e887250dc02cd49b0f534fbe70c8e95515a8ad5a.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5d0d59d93ac093d98ef2d8d5e887250dc02cd49b0f534fbe70c8e95515a8ad5a.dll
Resource
win10v2004-20230915-en
Target
5d0d59d93ac093d98ef2d8d5e887250dc02cd49b0f534fbe70c8e95515a8ad5a
Size
472KB
MD5
20f7fd3a344500a11f97234390f05b4a
SHA1
b827bc06925c3de34975420eecec1e1482bf3020
SHA256
5d0d59d93ac093d98ef2d8d5e887250dc02cd49b0f534fbe70c8e95515a8ad5a
SHA512
e6a0e2a89b123660ee2cdfb3e59fc5158f06be7b11532a7a5159785f9ce3ff83d2d8685918eff0cfad29d703b69139ed8000f9538b01bde5d2ad70816e53aed2
SSDEEP
6144:q8aBLtgiixG0qGT6Uz/Wxo7aAZQ8CokTu+OgngLgPL/8gyhCAd:q8KLmnxG0qWj7+hAZQ8s+L3hCg
Checks for missing Authenticode signature.
resource |
---|
5d0d59d93ac093d98ef2d8d5e887250dc02cd49b0f534fbe70c8e95515a8ad5a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_NET_SDK_GetDevConfigV2@36
ord57
_NET_SDK_GetMusicConfig@20
ord10
_NET_SDK_SetMusicConfig@20
ord35
ord16
ord15
ord14
ord17
ord18
ord45
ord9
ord8
ord6
ord5
ord3
ord2
ord1
ord7
ord21
ord11
ord53
ord54
ord42
ord22
ord43
ord36
ord38
ord40
ord39
ord13
ord23
ord25
ord26
ord27
ord28
ord30
ord32
_NET_SDK_UpGradeMusicFile@344
ord34
ord67
ord31
_NET_SDK_GetFileByTime_V4@28
ord40
_PLAY_SDK_SetHum@16
_PLAY_SDK_SetROI@16
ord61
_PLAY_SDK_SetMontion@24
ord18
ord89
ord78
ord77
ord84
_PLAY_SDK_SetDirectionLine@20
_PLAY_SDK_GetMontion@12
ord14
ord44
ord85
_PLAY_SDK_GetVideoParameter@12
ord16
ord15
ord41
ord6
ord95
_PLAY_SDK_SetPEARule@32
_PLAY_SDK_SetAnalysiLine@32
ord2
ord10
_PLAY_SDK_SetPoint@16
ord88
ord38
ord12
ord1
ord52
_PLAY_SDK_GetFileStartTime@12
_PLAY_SDK_SetAdaptation@8
ord83
_PLAY_SDK_GetH265@4
ord36
ord82
ord19
ord4
ord3
ord50
ord33
ord5
ord17
ord7
_AVI_SetCallBack@8
ord4115
ord5731
ord3210
ord1123
ord1934
ord3204
ord1280
ord2372
ord1903
ord572
ord3195
ord4261
ord4486
ord3949
ord2644
ord3709
ord3719
ord3718
ord2991
ord2533
ord2646
ord2540
ord2862
ord2714
ord4307
ord2835
ord2731
ord2537
ord5200
ord1599
ord1655
ord1656
ord1964
ord5175
ord1362
ord4967
ord3345
ord6277
ord3802
ord6279
ord1522
ord2172
ord2178
ord2405
ord2387
ord2385
ord2403
ord2415
ord2392
ord2408
ord2413
ord2396
ord2398
ord2400
ord2394
ord2410
ord2390
ord934
ord930
ord932
ord928
ord923
ord5233
ord5235
ord5960
ord1600
ord4282
ord4722
ord3403
ord5214
ord4185
ord6275
ord5073
ord1908
ord5152
ord4244
ord1402
ord3946
ord1617
ord1620
ord5915
ord6725
ord620
ord3761
ord6090
ord3684
ord4761
ord4353
ord265
ord911
ord3605
ord6067
ord3163
ord2301
ord1614
ord760
ord3244
ord2094
ord4100
ord1955
ord4125
ord297
ord2654
ord4320
ord5613
ord6065
ord4118
ord2657
ord2902
ord907
ord1439
ord6288
ord629
ord5089
ord384
ord5323
ord5403
ord2475
ord4035
ord5807
ord1489
ord299
ord6703
ord6118
ord605
ord354
ord3182
ord4262
ord5203
ord1401
ord5912
ord6724
ord1551
ord1670
ord1671
ord2020
ord4890
ord4735
ord4212
ord5182
ord1794
ord6282
ord4580
ord6063
ord6283
ord3758
ord4749
ord6144
ord4104
ord630
ord2747
ord2021
ord385
ord3088
ord3389
ord3056
ord4109
ord3641
ord3596
ord3161
ord1279
ord5637
ord709
ord602
ord1929
ord6037
ord347
ord501
ord3441
ord2368
ord1554
ord3292
ord1581
ord1643
ord715
ord2271
ord5946
ord3908
ord566
ord3262
ord4481
ord2990
ord2838
ord3829
ord5566
ord5213
ord5230
ord4568
ord3948
ord304
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord757
ord1054
ord1084
ord6754
ord6252
ord1138
ord314
ord1150
ord908
ord2451
ord3604
ord3602
ord476
ord3275
ord2942
ord2857
ord5380
ord4314
ord6265
ord2911
ord6264
ord701
ord3520
ord1093
ord1147
ord1132
ord5243
ord5256
ord5261
ord2050
ord4845
ord6270
ord5896
ord1230
ord4931
ord4346
ord5529
ord1395
ord4301
ord3657
ord4635
ord683
ord3825
ord451
ord5679
ord4483
ord3950
ord2645
ord2541
ord2847
ord4308
ord2836
ord2732
ord2538
ord1906
ord2510
ord4395
ord2993
ord1997
ord4870
ord4883
ord4252
ord4900
ord4459
ord4245
ord4612
ord4615
ord4613
ord4188
ord4193
ord4205
ord4438
ord4958
ord4495
ord4496
ord4513
ord4656
ord4186
ord4506
ord4521
ord4919
ord4558
ord4512
ord4534
ord4535
ord4536
ord4800
ord4801
ord4527
ord4831
ord4826
ord4821
ord4879
ord4449
ord4374
ord4404
ord4795
ord4514
ord4642
ord4530
ord4531
ord3980
ord5487
ord2556
ord2422
ord4577
ord4575
ord5061
ord3756
ord2509
ord5118
ord1424
ord1621
ord5860
ord4814
ord4737
ord1658
ord5519
ord4498
ord4556
ord4173
ord966
ord5456
ord1329
ord1957
ord3537
ord3661
ord479
ord4484
ord2858
ord4279
ord5210
ord6271
ord4582
ord4903
ord4726
ord4540
ord4426
ord703
ord1763
ord1134
ord442
ord675
ord380
ord3201
ord2702
ord2703
ord5493
ord2367
ord1968
ord2263
ord2903
ord6120
ord1049
ord1966
ord5727
ord3302
ord5634
ord5642
ord1728
ord2375
ord3317
ord4240
ord1591
ord2095
ord741
ord1971
ord1283
ord2233
ord1092
ord423
ord3233
ord660
ord4063
ord866
ord5466
ord6297
ord5331
ord2346
ord1580
ord762
ord6286
ord5320
ord1181
ord3255
ord2272
ord4108
ord3997
ord876
ord784
ord3934
ord310
ord2468
ord2322
ord578
ord781
ord266
ord1191
ord1185
ord1187
ord764
ord581
ord1209
ord1177
ord1175
ord1201
ord1120
ord1167
ord1917
ord371
ord1098
ord1208
ord1206
ord1037
ord315
ord765
ord1050
ord2247
labs
abs
wcstombs
setlocale
strftime
_localtime64_s
_mktime64
_localtime64
strstr
strlen
strncpy
sprintf_s
memcpy
_purecall
wcslen
_time64
_CxxThrowException
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
atoi
memset
free
malloc
__CxxFrameHandler3
sprintf
fclose
fgetpos
fseek
fopen
_access
_itoa
sscanf_s
_mbsstr
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
sscanf
memmove_s
strcmp
strchr
_mbsicmp
strtoul
_ismbcalnum
realloc
_mbsnbcmp
_mbsnbcpy_s
wcsncpy
_splitpath_s
vsprintf
??0exception@std@@QAE@ABV01@@Z
LeaveCriticalSection
CreateThread
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLastError
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
LocalAlloc
LocalFree
MulDiv
EnterCriticalSection
OutputDebugStringA
GetLocalTime
Sleep
CreateDirectoryA
FindFirstFileA
GetPrivateProfileIntA
GetModuleFileNameA
CloseHandle
WaitForSingleObject
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
ReadFile
CreateFileA
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
SetWindowLongA
GetMenuItemID
CopyRect
GetWindowLongA
UpdateWindow
SetWindowRgn
GetDesktopWindow
ReleaseDC
GetDC
SystemParametersInfoA
SetWindowPos
AnimateWindow
GetFocus
ScreenToClient
ClientToScreen
IsZoomed
InflateRect
PtInRect
GetWindow
GetCursorPos
GetSystemMetrics
FindWindowA
ShowWindow
RegisterHotKey
UnregisterHotKey
LoadCursorA
SetCursor
IsWindow
SetParent
KillTimer
SetTimer
InvalidateRect
GetClientRect
GetWindowRect
PostMessageA
EqualRect
SetRect
GetSysColor
EnableWindow
GetParent
RedrawWindow
GetWindowDC
MoveWindow
GetClassNameA
SendMessageA
GetMenuItemCount
GetSystemMenu
CopyImage
CallWindowProcA
DrawIconEx
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateBitmap
RealizePalette
SelectObject
SelectPalette
CreateCompatibleBitmap
DeleteDC
GetDIBits
CreateICA
CreateRectRgn
CreateSolidBrush
GetStockObject
GetObjectA
ExtCreateRegion
CreateFontIndirectA
CombineRgn
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
ord155
ord189
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHOpenFolderAndSelectItems
CreateStreamOnHGlobal
CoCreateInstance
OleLoadPicture
LoadRegTypeLi
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?length@?$char_traits@D@std@@SAIPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?_Lock@_Mutex@std@@QAEXXZ
GdiplusShutdown
sndPlaySoundA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ