DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
656b1df460cda22b44efa44473ca0e6d797e868261025f99408504acd99a1141.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
656b1df460cda22b44efa44473ca0e6d797e868261025f99408504acd99a1141.dll
Resource
win10v2004-20231020-en
Target
656b1df460cda22b44efa44473ca0e6d797e868261025f99408504acd99a1141
Size
472KB
MD5
b7cc033f2b02473ef8a8653f4c594ea5
SHA1
bab2311bae9e1278fa12d070509eb1dc02e6a3f2
SHA256
656b1df460cda22b44efa44473ca0e6d797e868261025f99408504acd99a1141
SHA512
c3e13b78fde687b5f124c220ff68b3029aef7f70635fecd81696036580848693b81d65d2735f6dae0e358eb61d4d27e58fa8dffe4452d8878632a815865883d8
SSDEEP
6144:J1n55k7BeG9xVXtqLK+DLpzWCK1aVZfIsilA2XZklgihlteLtEN718Qcn2GlD/mX:b6F1tGLk0fNapklgihlte2JqWF
Checks for missing Authenticode signature.
resource |
---|
656b1df460cda22b44efa44473ca0e6d797e868261025f99408504acd99a1141 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ConvertThreadToFiber
CreateFiber
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
SleepEx
SwitchToFiber
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcmp
memcpy
memset
rand
realloc
strerror
strlen
strncmp
vfprintf
wcslen
wcsncat
wcsncpy
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ