??0CLdCs@@QAE@XZ
??4CLdCs@@QAEAAV0@ABV0@@Z
Static task
static1
Behavioral task
behavioral1
Sample
34947baa7e1815291db729db0394eeb0_dll32_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
34947baa7e1815291db729db0394eeb0_dll32_JC.dll
Resource
win10v2004-20230915-en
Target
34947baa7e1815291db729db0394eeb0_dll32_JC.dll
Size
200KB
MD5
34947baa7e1815291db729db0394eeb0
SHA1
bf2538facbd822ef7619896b55d15ec90ce9b7bc
SHA256
eaf8a5c4204a9fd7b1dde7359479d13d8cb0dabfda10b330a57b79b850b5a430
SHA512
e1e3b8b0b18456f792234ff90df5a86ffcdf155a9ac655a1f602dfad2416918ab0ae61d204bae591495cabda6bcfef620662b020a7522fd890890687c8dfc9ab
SSDEEP
1536:LN8We/dxd7zl9odyo8zlqoJQxLU1M2yCsbWOOPjaXsLWlG0FY1mUkG53YOfkr+X9:LNJe/dP7zYdizlFJQnUka3YmQa4oZ
Checks for missing Authenticode signature.
resource |
---|
34947baa7e1815291db729db0394eeb0_dll32_JC.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteProcessMemory
GetCurrentProcess
CompareStringW
CompareStringA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetConsoleCtrlHandler
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FatalAppExitA
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
Sleep
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
RtlUnwind
CloseHandle
GetTimeZoneInformation
GetLocaleInfoW
SetEnvironmentVariableA
MessageBoxA
??0CLdCs@@QAE@XZ
??4CLdCs@@QAEAAV0@ABV0@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ