DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a71c4063c87ba73ca077beaf35240f280c8c4b12c456db21ce89c33a6d1133c4.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a71c4063c87ba73ca077beaf35240f280c8c4b12c456db21ce89c33a6d1133c4.dll
Resource
win10v2004-20231023-en
Target
a71c4063c87ba73ca077beaf35240f280c8c4b12c456db21ce89c33a6d1133c4
Size
536KB
MD5
78219ec9c0d65cc6d1eafd096cb66c42
SHA1
897c9f5f6eecfed5fe215957dc03708a359ac799
SHA256
a71c4063c87ba73ca077beaf35240f280c8c4b12c456db21ce89c33a6d1133c4
SHA512
6a3863bd31ddfab8376ab50601a44f271ce5357f165ddb7ad79f0cf78584cd4d1d84fcecee2b797f8f468439211db682cf7693fcf04ebff87ef710096637f7a9
SSDEEP
6144:cYNYL40giDGTtimpvlWmQzfSi36wUPzXUknR4tMm:nNYL44ktRpvlho3EzXUkRW
Checks for missing Authenticode signature.
resource |
---|
a71c4063c87ba73ca077beaf35240f280c8c4b12c456db21ce89c33a6d1133c4 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
FindStringOrdinal
GetLocalTime
MultiByteToWideChar
LoadResource
IsValidLocale
HeapReAlloc
SizeofResource
GetTickCount
GetCPInfo
DisableThreadLibraryCalls
IsBadStringPtrA
EnumResourceNamesW
HeapAlloc
GetModuleHandleW
GetEnvironmentVariableW
FindResourceW
IsBadStringPtrW
GetProcAddress
GetLocaleInfoW
WideCharToMultiByte
IsDBCSLeadByteEx
GetModuleFileNameW
GetUserDefaultLCID
LoadLibraryW
HeapFree
_vsnprintf
CoTaskMemFree
CreateBindCtx
CoGetClassObject
CLSIDFromProgID
MkParseDisplayName
SystemTimeToVariantTime
VarFormatCurrency
SafeArrayGetUBound
LoadTypeLib
VarNot
VarMul
VarFormatPercent
VariantClear
VarDateFromUdateEx
VarFix
VarDateFromStr
SafeArrayRedim
SafeArrayUnlock
SysAllocStringLen
VarDiv
VarBoolFromStr
VarFormatNumber
VarSub
VariantChangeType
VarInt
VarImp
VarFormatDateTime
SysStringLen
VariantTimeToSystemTime
VarXor
SafeArrayPtrOfIndex
VarWeekdayName
SafeArrayGetLBound
SysAllocString
LoadRegTypeLib
VarAdd
SafeArrayCreate
VarOr
VariantCopy
VarEqv
SafeArrayAccessData
VarNeg
VarMod
VarCat
VarAbs
VarMonthName
SafeArrayLock
VarAnd
SafeArrayDestroy
VarCmp
VarPow
VariantCopyInd
VarIdiv
SafeArrayUnaccessData
SysFreeString
_wcsdup
strlen
memmove
wcscmp
free
wcspbrk
_strdup
sin
__stdio_common_vsprintf
__acrt_iob_func
memcpy
calloc
realloc
iswalnum
tan
round
towlower
strcspn
strchr
cos
_wcsicmp
iswspace
atan
pow
isalnum
_dclass
strcpy
iswalpha
towupper
memset
fwrite
exp
memcmp
_assert
strcmp
sqrt
malloc
log
getenv
MessageBoxW
LoadStringW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ