DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
fbabb02124c9c7bffae6bc7f731de05812088842877d554552ae98cc0a8c3c5e.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fbabb02124c9c7bffae6bc7f731de05812088842877d554552ae98cc0a8c3c5e.dll
Resource
win10v2004-20231020-en
Target
fbabb02124c9c7bffae6bc7f731de05812088842877d554552ae98cc0a8c3c5e
Size
472KB
MD5
2815b7b8e6ed83a3ab12665e1bae2975
SHA1
f26b9ee334224d8165986f70724e53f3f73173b1
SHA256
fbabb02124c9c7bffae6bc7f731de05812088842877d554552ae98cc0a8c3c5e
SHA512
c75de77d43f296d53588c46245d25af4d27e8edd6f88a6a5a510a2ab61c877de95698f29b65b0b178679f3660f186f3a0a885b25db7d07121e16282587ed018c
SSDEEP
6144:K1n55koJwMgx6djLzMbldpkkd3tb4/NSGm2B7WCyyFHuBDPz:IXOHEMRkkdC/N9WCyyFHuBDr
Checks for missing Authenticode signature.
resource |
---|
fbabb02124c9c7bffae6bc7f731de05812088842877d554552ae98cc0a8c3c5e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ConvertThreadToFiber
CreateFiber
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
SleepEx
SwitchToFiber
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcmp
memcpy
memset
rand
realloc
strerror
strlen
strncmp
vfprintf
wcslen
wcsncat
wcsncpy
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ