ARef
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Start
Static task
static1
Behavioral task
behavioral1
Sample
B1A46F3CDB4A1A692D999D134FE2FC50.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
B1A46F3CDB4A1A692D999D134FE2FC50.dll
Resource
win10v2004-20230915-en
Target
B1A46F3CDB4A1A692D999D134FE2FC50.dll
Size
348KB
MD5
b1a46f3cdb4a1a692d999d134fe2fc50
SHA1
907a779b83d51f53f2547b199bc05e661845ce07
SHA256
f95f4c824a9d81547fdbe72baea32be43dfd99fa46f40d925cb6274dc3a2d9b4
SHA512
b1b70b7985647cbd99834633c11cfb9cadf0d91e54e37f003295d968880a78cd2975c7801e68dbf6ef5262182b0cdc9d81839c63d5bd242c1a65cb1fc994a6e9
SSDEEP
6144:4uiQ4beuJLx6Mq5G3Yx6tRiOrXmwqykixucx97rxnn4O5JO5Z7:4uiQ4beuJVp3YwrdPxP97rxDJIF
Checks for missing Authenticode signature.
resource |
---|
B1A46F3CDB4A1A692D999D134FE2FC50.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
RegCloseKey
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
CloseHandle
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
GetConsoleWindow
GetCurrentProcessId
GetLastError
GetNativeSystemInfo
GetProcAddress
GetProcessHeap
GetTempPathW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalAlloc
LocalFree
OpenProcess
Process32FirstW
Process32NextW
Sleep
TerminateProcess
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
realloc
strcpy
strlen
strncmp
vfprintf
wcscat_s
wcscmp
wcscpy
wcscpy_s
wcslen
SHGetFolderPathW
StrStrIW
ShowWindow
ARef
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ