CreateCdmInstance
DeinitializeCdmModule
GetCdmVersion
InitializeCdmModule_4
VerifyCdmHost_0
Static task
static1
Behavioral task
behavioral1
Sample
d5bba73b489622f1a7cf46e7558efacd9765a7c8ff03e62917c7df6bf843ff19.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d5bba73b489622f1a7cf46e7558efacd9765a7c8ff03e62917c7df6bf843ff19.dll
Resource
win10v2004-20230915-en
Target
d5bba73b489622f1a7cf46e7558efacd9765a7c8ff03e62917c7df6bf843ff19
Size
120KB
MD5
94fbefc2ce50cdb18c2aa4e8f87020d3
SHA1
ad23de2df85a9330bcd031e632871027045b86c1
SHA256
d5bba73b489622f1a7cf46e7558efacd9765a7c8ff03e62917c7df6bf843ff19
SHA512
52ee3f06b9756fa41af7527691f7d499cd4ec0e19d01ab97ec20bd76b308e33e3aedd9d64e87f6349fc9523484b0c4bcff33646c84f4b574ac0b1eaf88be6c32
SSDEEP
3072:u3JiOKF4gmIvr9kTCmaLhmGD8nlK8AeIfX1Ex:4J90vBS8hmGD8EpFEx
Checks for missing Authenticode signature.
resource |
---|
d5bba73b489622f1a7cf46e7558efacd9765a7c8ff03e62917c7df6bf843ff19 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryA
Sleep
GetProcAddress
CreateFileA
CreateFileW
GetCurrentProcess
WriteProcessMemory
OpenProcess
GetCurrentProcessId
VirtualProtect
ReadProcessMemory
RtlCaptureContext
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetEnvironmentVariableA
ReadFile
CloseHandle
CreateProcessA
GetStartupInfoA
CreatePipe
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
MessageBoxA
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
?always_noconv@codecvt_base@std@@QEBA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
av_packet_alloc
av_packet_unref
avcodec_alloc_context3
avcodec_close
avcodec_find_decoder
avcodec_find_encoder
avcodec_free_context
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet
av_interleaved_write_frame
av_read_frame
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_new_stream
avformat_open_input
avformat_write_header
avio_open
av_encryption_info_free
av_encryption_info_get_side_data
av_frame_alloc
av_frame_get_buffer
av_frame_unref
av_free
av_get_bytes_per_sample
av_opt_set
av_rescale_q
__CxxFrameHandler4
memmove
__std_exception_destroy
memcpy
memcmp
memchr
__std_exception_copy
__std_terminate
__std_type_info_destroy_list
memset
_CxxThrowException
_purecall
__C_specific_handler
__current_exception
__current_exception_context
_initialize_narrow_environment
_seh_filter_dll
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
fgetc
fread
_get_stream_buffer_pointers
__stdio_common_vsprintf_s
fwrite
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
__stdio_common_vsprintf
fclose
__stdio_common_vfprintf
fopen_s
ungetc
fputc
__acrt_iob_func
_time64
_localtime64_s
_unlock_file
_lock_file
isdigit
isxdigit
islower
isspace
free
malloc
_callnewh
atoi
CreateCdmInstance
DeinitializeCdmModule
GetCdmVersion
InitializeCdmModule_4
VerifyCdmHost_0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ