?pForceReexportACFRegisterPlugin@@3PEBXEB
ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
PluginHookCallback
Static task
static1
Behavioral task
behavioral1
Sample
5e2821b7f52c14f8a5b905948245383a9a292cf6e9080ff5e0b2d76b1cdaa24f.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5e2821b7f52c14f8a5b905948245383a9a292cf6e9080ff5e0b2d76b1cdaa24f.dll
Resource
win10v2004-20231023-en
Target
5e2821b7f52c14f8a5b905948245383a9a292cf6e9080ff5e0b2d76b1cdaa24f
Size
2.0MB
MD5
c83172a9703d7ef69a66761f895fdad4
SHA1
b67f01faa830dae429451981959b92c53dd54ccf
SHA256
5e2821b7f52c14f8a5b905948245383a9a292cf6e9080ff5e0b2d76b1cdaa24f
SHA512
1a3790ea1ce4f5594b8a69a27e6171c4f9eae582b67dd2cab7f4f835f3fc1a0715db07219f2cbb93ce761461fb89f6cf1215dec8c1c21fb15edd966303f6086e
SSDEEP
49152:1RVtcj4QsOu5tq5nqRCjR2qXOXmPmravnQ9LL:BLODnqSer/
Checks for missing Authenticode signature.
resource |
---|
5e2821b7f52c14f8a5b905948245383a9a292cf6e9080ff5e0b2d76b1cdaa24f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CopyFileW
GetLongPathNameW
GetLocaleInfoA
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
SetPriorityClass
GetCurrentProcess
VirtualQuery
GetModuleFileNameA
GetProcessAffinityMask
GlobalMemoryStatusEx
GetProcessTimes
HeapLock
HeapWalk
HeapUnlock
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
Sleep
RaiseException
CreateThread
SetThreadPriority
GetCurrentThread
TerminateThread
CloseHandle
SetLastError
SetFileAttributesA
FindFirstFileW
FindNextFileW
FindClose
GetDiskFreeSpaceExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetErrorMode
CreateMutexA
ReleaseMutex
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
GetFileSizeEx
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
SetEndOfFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetStdHandle
GetCurrentThreadId
GetProcAddress
LoadLibraryW
GetLastError
FreeLibrary
LockResource
LoadResource
SizeofResource
WaitForSingleObject
FindResourceA
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
FormatMessageA
LocalFree
GetLocaleInfoEx
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindFirstFileExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
AreFileApisANSI
DeviceIoControl
GetModuleHandleW
CreateDirectoryExW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
EncodePointer
DecodePointer
LCMapStringEx
InitializeCriticalSectionEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
TerminateProcess
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
DeleteFileW
GetProcessHeap
RemoveDirectoryW
SetStdHandle
ExitThread
HeapSize
IsWindowEnabled
MessageBoxW
IsWindow
GetClassInfoExA
RegisterClassExA
CreateWindowExW
EnumThreadWindows
EnableWindow
SetParent
GetWindowRect
GetDesktopWindow
MessageBoxA
UnregisterClassW
DefWindowProcA
GetWindowLongPtrA
SetWindowPos
DestroyWindow
SetWindowLongPtrA
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
SHGetFolderPathW
CoInitialize
CoUninitialize
ImageUnload
ImageLoad
UrlCreateFromPathW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
?pForceReexportACFRegisterPlugin@@3PEBXEB
ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
PluginHookCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ