?pForceReexportACFRegisterPlugin@@3PEBXEB
ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
PluginHookCallback
Static task
static1
Behavioral task
behavioral1
Sample
3d0945680cad1425b69369f60be9d456422905ab0ff47f61b28192bf7b401cb8.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
3d0945680cad1425b69369f60be9d456422905ab0ff47f61b28192bf7b401cb8.dll
Resource
win10v2004-20231020-en
Target
3d0945680cad1425b69369f60be9d456422905ab0ff47f61b28192bf7b401cb8
Size
2.0MB
MD5
36514512ba9c75e91e58d59ce8b8a727
SHA1
54a0574c295482e194669612589c28105414e41b
SHA256
3d0945680cad1425b69369f60be9d456422905ab0ff47f61b28192bf7b401cb8
SHA512
d656d60b3e43a59ba307865444e6f5b2f3f113ec306d2d89efc190cc223bf9858d6e1e3d266bc62a4c019e98fced86d3d12fa53b6a2ceb77d999cef44536db47
SSDEEP
49152:yRVtcj4QsOu5tq5nqRCjR2qXOXmPmravnQ9L8:ULODnqSerI
Checks for missing Authenticode signature.
resource |
---|
3d0945680cad1425b69369f60be9d456422905ab0ff47f61b28192bf7b401cb8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CopyFileW
GetLongPathNameW
GetLocaleInfoA
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
SetPriorityClass
GetCurrentProcess
VirtualQuery
GetModuleFileNameA
GetProcessAffinityMask
GlobalMemoryStatusEx
GetProcessTimes
HeapLock
HeapWalk
HeapUnlock
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
Sleep
RaiseException
CreateThread
SetThreadPriority
GetCurrentThread
TerminateThread
CloseHandle
SetLastError
SetFileAttributesA
FindFirstFileW
FindNextFileW
FindClose
GetDiskFreeSpaceExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetErrorMode
CreateMutexA
ReleaseMutex
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
GetFileSizeEx
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
SetEndOfFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetStdHandle
GetCurrentThreadId
GetProcAddress
LoadLibraryW
GetLastError
FreeLibrary
LockResource
LoadResource
SizeofResource
WaitForSingleObject
FindResourceA
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
FormatMessageA
LocalFree
GetLocaleInfoEx
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindFirstFileExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
AreFileApisANSI
DeviceIoControl
GetModuleHandleW
CreateDirectoryExW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
EncodePointer
DecodePointer
LCMapStringEx
InitializeCriticalSectionEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
TerminateProcess
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
DeleteFileW
GetProcessHeap
RemoveDirectoryW
SetStdHandle
ExitThread
HeapSize
IsWindowEnabled
MessageBoxW
IsWindow
GetClassInfoExA
RegisterClassExA
CreateWindowExW
EnumThreadWindows
EnableWindow
SetParent
GetWindowRect
GetDesktopWindow
MessageBoxA
UnregisterClassW
DefWindowProcA
GetWindowLongPtrA
SetWindowPos
DestroyWindow
SetWindowLongPtrA
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
SHGetFolderPathW
CoInitialize
CoUninitialize
ImageUnload
ImageLoad
UrlCreateFromPathW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
?pForceReexportACFRegisterPlugin@@3PEBXEB
ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
PluginHookCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ