DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
c396441b2354fbc108baac3d3e78787e90ee80c0b969afecacc8a0402bc81f7c.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
c396441b2354fbc108baac3d3e78787e90ee80c0b969afecacc8a0402bc81f7c.dll
Resource
win10v2004-20231020-en
Target
c396441b2354fbc108baac3d3e78787e90ee80c0b969afecacc8a0402bc81f7c
Size
472KB
MD5
147c6f9362d171a37819c1cd83f3d2f6
SHA1
7ff9acd96e280ca070e8fcf438b63dc6b7b70ebd
SHA256
c396441b2354fbc108baac3d3e78787e90ee80c0b969afecacc8a0402bc81f7c
SHA512
e1f230ac03fdb585b106fb5d18ded5d4b0c31239d28d2edcdd291057884cdc131c66c866a255b846569a5f80f1e09035e94f08e39176579fa7c1d9ef65f0ba4f
SSDEEP
6144:K1n55k0phOVPwijj9It2aYbvkffffffFD50CgEZZVW5CLUItvzXSJ/CKSQnRf:IFqIt2DaFgEBLZ1zXSJ/CKSQnR
Checks for missing Authenticode signature.
resource |
---|
c396441b2354fbc108baac3d3e78787e90ee80c0b969afecacc8a0402bc81f7c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ConvertThreadToFiber
CreateFiber
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
SleepEx
SwitchToFiber
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcmp
memcpy
memset
rand
realloc
strerror
strlen
strncmp
vfprintf
wcslen
wcsncat
wcsncpy
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ