DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
dc4b1db7a7f1289c6e8eb838e62bc8b21b3a0e64c9f52c9b50e0aec0c9ae92ce.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dc4b1db7a7f1289c6e8eb838e62bc8b21b3a0e64c9f52c9b50e0aec0c9ae92ce.dll
Resource
win10v2004-20230915-en
Target
dc4b1db7a7f1289c6e8eb838e62bc8b21b3a0e64c9f52c9b50e0aec0c9ae92ce
Size
39KB
MD5
f36daf0f2b0d45a026a7403c9206b5f6
SHA1
7b7a16e3f3b91a0341b6ba359d5b153129886059
SHA256
dc4b1db7a7f1289c6e8eb838e62bc8b21b3a0e64c9f52c9b50e0aec0c9ae92ce
SHA512
62135d6d19190f5eb5e8cba91cec9436dc2d4c4968457851436336c75bc0125c21b69f680e2a1f87066d74a75f0df49b57b70b46228cc5f37085eecd94e3e98f
SSDEEP
768:SgMC7IFIk5En9dNmFuGuB3vtgFLrEv+wOmwqDeo+P:tZIFIkyn9CAGu9vtOLrEv+w+
Checks for missing Authenticode signature.
resource |
---|
dc4b1db7a7f1289c6e8eb838e62bc8b21b3a0e64c9f52c9b50e0aec0c9ae92ce |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
ConnectNamedPipe
CreateFileA
CreateNamedPipeA
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReadFile
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
strerror
strlen
strncmp
vfprintf
wcslen
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ