DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
88f5fee0e8735ff7b8079786c1e6df4aaa34de2ab560d582c272c4161f908677.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
88f5fee0e8735ff7b8079786c1e6df4aaa34de2ab560d582c272c4161f908677.dll
Resource
win10v2004-20231020-en
Target
88f5fee0e8735ff7b8079786c1e6df4aaa34de2ab560d582c272c4161f908677
Size
180KB
MD5
26a1549ed0d9b8235fbedad7f5275aa8
SHA1
74b176506ee7824bf1d7a5e86f00a6fa54d020b5
SHA256
88f5fee0e8735ff7b8079786c1e6df4aaa34de2ab560d582c272c4161f908677
SHA512
b42198283a90e46a5e2e69f1f53fe39e1661541cc3c5cdbe7aefc9e4fd37f2b7f4f2c4138ac59ca84047cd94c4e3b64477dcb0e05bfa114221beff49cad74115
SSDEEP
1536:iUR4RH/JRYkUdCqobJvIwRfgBXtx1Oy/sHyUZIZAeNjRnu53Y0tsJ8eZ8wCD3IEO:nAH/JKkPFvIwmXpGUjhJ8duroldw
Checks for missing Authenticode signature.
resource |
---|
88f5fee0e8735ff7b8079786c1e6df4aaa34de2ab560d582c272c4161f908677 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Direct3DCreate9
DirectDrawCreateEx
CloseHandle
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
FormatMessageW
GetComputerNameW
GetDateFormatW
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
GetTickCount
GetTimeFormatW
GetVersionExW
GetWindowsDirectoryW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
K32EnumProcessModules
K32EnumProcesses
K32GetModuleBaseNameW
LoadLibraryW
LoadResource
MultiByteToWideChar
OpenProcess
SizeofResource
lstrcmpW
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromGUID2
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantCopy
VariantInit
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcschr
EnumDisplayDevicesW
LoadStringW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ