DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
79a771902388571bb8251ec8d82827c16f0c0c00838c0c803b9f815bd82ebfc4.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
79a771902388571bb8251ec8d82827c16f0c0c00838c0c803b9f815bd82ebfc4.dll
Resource
win10v2004-20231023-en
Target
79a771902388571bb8251ec8d82827c16f0c0c00838c0c803b9f815bd82ebfc4
Size
443KB
MD5
0e1b7fe1f7f25e63000943980183f9f7
SHA1
de9c17a8de92bc6a4ab2290111236977fdc623ed
SHA256
79a771902388571bb8251ec8d82827c16f0c0c00838c0c803b9f815bd82ebfc4
SHA512
2e882847a4c60efff2107617b6295646ec0c7894bd17c5cea0d5d3e5fc53bce647f610533f68313d7e8493f4c369ac92e8bd1ac1dc9cfecf212a448b3c001a25
SSDEEP
3072:lxpTlq/hrzjg4YiG1BGFraZ3RxUPu2BlEodQ:yZTZ5PCcu2VdQ
Checks for missing Authenticode signature.
resource |
---|
79a771902388571bb8251ec8d82827c16f0c0c00838c0c803b9f815bd82ebfc4 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
InitCommonControlsEx
CloseHandle
CreateEventW
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
FindResourceW
FormatMessageW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
GetTickCount64
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
LoadLibraryW
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SizeofResource
WaitForSingleObject
_vsnprintf
__acrt_iob_func
__stdio_common_vsprintf
_strdup
_wcsdup
calloc
free
fwrite
getenv
malloc
memcmp
memmove
realloc
strchr
strcmp
strcpy
strcspn
strlen
CreateDialogParamW
DestroyWindow
DispatchMessageW
EnableWindow
GetAncestor
GetDlgItem
GetMessageW
GetWindowLongW
IsDialogMessageW
IsWindow
LoadStringW
PostThreadMessageW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetWindowLongW
SetWindowTextW
ShowWindow
TranslateMessage
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ