DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3590f6149b559ae29664f14c603943ac08d4a0da2dd61c0e9319ed8751a54c54.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
3590f6149b559ae29664f14c603943ac08d4a0da2dd61c0e9319ed8751a54c54.dll
Resource
win10v2004-20231020-en
Target
3590f6149b559ae29664f14c603943ac08d4a0da2dd61c0e9319ed8751a54c54
Size
812KB
MD5
0ef7d66187cb7bd9237502414bb1b14c
SHA1
2913e0c0dc61a2d723871a28995c476d1c2c262c
SHA256
3590f6149b559ae29664f14c603943ac08d4a0da2dd61c0e9319ed8751a54c54
SHA512
9d7e31a2bff549f84ca3fe92638065705b55a97668cd8829e99ee67822bce2aa95eb7e26560e9cb02146d267f5adacdd517ac9368bee09caf11bb3880f00006c
SSDEEP
12288:WT7oQeTl8BrcV8UTgwFZ5BN3xXPdRj+2Ky2jg13RnLR:WT7oQeTRVdEwFvvhXPiNO
Checks for missing Authenticode signature.
resource |
---|
3590f6149b559ae29664f14c603943ac08d4a0da2dd61c0e9319ed8751a54c54 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
SystemFunction036
DisableThreadLibraryCalls
EnumResourceNamesW
FileTimeToLocalFileTime
FindResourceW
GetDateFormatW
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
SizeofResource
WideCharToMultiByte
CLSIDFromProgID
CoGetClassObject
CoTaskMemFree
LoadRegTypeLib
SafeArrayAccessData
SafeArrayCopy
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_assert
_finite
_isnan
_ltow_s
_strdup
_wcsicmp
_wcsnicmp
acos
asin
atan
atan2
bsearch
cos
exp
fmod
free
fwrite
getenv
isalnum
iswalnum
iswalpha
iswspace
log
log10
malloc
memcmp
memcpy
memmove
memset
pow
sin
sqrt
strchr
strcmp
strcpy
strcspn
strlen
tan
towlower
towupper
wcschr
wcscmp
wcsncmp
wcsstr
wcstol
LoadStringW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ