DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d56ebbb11a1fa4b3c0eacdbb73192a45c43fa6f246fed27be690d6254cc0c7c.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4d56ebbb11a1fa4b3c0eacdbb73192a45c43fa6f246fed27be690d6254cc0c7c.dll
Resource
win10v2004-20230915-en
Target
4d56ebbb11a1fa4b3c0eacdbb73192a45c43fa6f246fed27be690d6254cc0c7c
Size
308KB
MD5
5be7670fc568d60f0bc12edfb3121095
SHA1
052de9f2f7e0fbe6b5de87479fead525a3368d91
SHA256
4d56ebbb11a1fa4b3c0eacdbb73192a45c43fa6f246fed27be690d6254cc0c7c
SHA512
104ce4b15c0f9684f47904821dcb499d3cd41ffdf660adf03241cbd967c749e5c957aae344cd07d85a30899bfd86ccecf992f8a257b80e071a2162a1f04e08d4
SSDEEP
3072:Mhs7RQPvQmh0rmur5IBHfkwXqvTsQSfagEtsurjPaj4w4U0EDmERS1yTnvTv4J:MG7RQPvQH9Sq7FCfEtsKCj34OH3TvTv0
Checks for missing Authenticode signature.
resource |
---|
4d56ebbb11a1fa4b3c0eacdbb73192a45c43fa6f246fed27be690d6254cc0c7c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Direct3DCreate9
DirectDrawCreateEx
DirectSoundCaptureEnumerateW
DirectSoundEnumerateW
CloseHandle
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
FormatMessageW
GetComputerNameW
GetDateFormatW
GetEnvironmentVariableW
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
GetTickCount
GetTimeFormatW
GetVersionExW
GetWindowsDirectoryW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
K32EnumProcessModules
K32EnumProcesses
K32GetModuleBaseNameW
LoadLibraryW
LoadResource
MultiByteToWideChar
OpenProcess
SizeofResource
lstrcmpW
_vsnprintf
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromGUID2
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantCopy
VariantInit
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcschr
wcsrchr
EnumDisplayDevicesW
LoadStringW
wsprintfW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ