DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
GetMenuFlags
IsRegistServer
SetAdminMode
SetMenuFlags
Static task
static1
Behavioral task
behavioral1
Sample
f334229d9c75c042f14795299689574538d8f2ae46427d290b74eff6667479b8.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f334229d9c75c042f14795299689574538d8f2ae46427d290b74eff6667479b8.dll
Resource
win10v2004-20230915-en
Target
f334229d9c75c042f14795299689574538d8f2ae46427d290b74eff6667479b8
Size
271KB
MD5
63eb09ef2dcad72b47377cad34392adc
SHA1
1818413f33b30ea8c6bb07dbefe9b46726d0dbe7
SHA256
f334229d9c75c042f14795299689574538d8f2ae46427d290b74eff6667479b8
SHA512
b47dcb80fcd7fb340e01029d6446f5cca370ce964f924113cba2534714c3a6dffb204d6a9c7cd80999d64e531286397b97e3b3d56552d73e37d7b22d7fe2fc0a
SSDEEP
6144:/2n7m7fGtlqd5GNSwTa9gN9M2OazdxQIOL:BGtlqYTa9sXOazb2L
Checks for missing Authenticode signature.
resource |
---|
f334229d9c75c042f14795299689574538d8f2ae46427d290b74eff6667479b8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetFullPathNameW
CreateFileW
GetLastError
FindFirstFileExW
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
GetTickCount
FindNextFileW
FindClose
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
GetVersionExA
GetEnvironmentStringsW
GetCurrentThreadId
WriteConsoleW
GetFileType
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
FreeEnvironmentStringsW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
GetEnvironmentVariableW
GlobalUnlock
CreateProcessW
GlobalLock
CloseHandle
DuplicateHandle
GetFileAttributesW
CreatePipe
GetThreadLocale
GetModuleFileNameW
WriteFile
GetStdHandle
GetCurrentProcess
GetLongPathNameW
GetSystemDefaultLCID
SelectObject
CreateCompatibleDC
GetClipRgn
CreateRectRgn
DeleteDC
SetTextColor
SetBkMode
SelectClipRgn
DeleteObject
GetObjectType
CreateDIBSection
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
GetMenuFlags
IsRegistServer
SetAdminMode
SetMenuFlags
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ