DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
c85e61e01e1b4716c13fa6ea5774d223394eaa945b7a7f0c17a9ed8ab1153b8a.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c85e61e01e1b4716c13fa6ea5774d223394eaa945b7a7f0c17a9ed8ab1153b8a.dll
Resource
win10v2004-20230915-en
Target
c85e61e01e1b4716c13fa6ea5774d223394eaa945b7a7f0c17a9ed8ab1153b8a
Size
18KB
MD5
d0dbe3e4009a7757567b157ffad5fce1
SHA1
9dc531b4c851bebcf547c1a31c4c762fe236ff20
SHA256
c85e61e01e1b4716c13fa6ea5774d223394eaa945b7a7f0c17a9ed8ab1153b8a
SHA512
af1c7768ac09392f7929baf650ad0f9596b93a2308cb8ef20d80c5991fcc1c07131339059d85bba09d1e3701407f6b4bbcb2c8e76700ada080de8db9632bb04f
SSDEEP
192:VxRF9JgNYyR6QYj/ii64G4En8Z0lP/Xs9O2YkCbfoA6p11EojjNy8:VfF9wnR6Qyii64m82lGO9kCbfup7tNy
Checks for missing Authenticode signature.
resource |
---|
c85e61e01e1b4716c13fa6ea5774d223394eaa945b7a7f0c17a9ed8ab1153b8a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
ConnectNamedPipe
CreateFileA
CreateNamedPipeA
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery
WriteFile
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
sprintf
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ