DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
523cc4d741b8dc7f3d27b7a0b574d2b6b1484f8072b75f2bbbe819c76616ced7.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
523cc4d741b8dc7f3d27b7a0b574d2b6b1484f8072b75f2bbbe819c76616ced7.dll
Resource
win10v2004-20231025-en
Target
523cc4d741b8dc7f3d27b7a0b574d2b6b1484f8072b75f2bbbe819c76616ced7
Size
216KB
MD5
6ea026f00a260b269f29ed190bdf6504
SHA1
e46dc4f685f9b5e59a78842fbd0bfbfa0e2d4c9c
SHA256
523cc4d741b8dc7f3d27b7a0b574d2b6b1484f8072b75f2bbbe819c76616ced7
SHA512
1b2152528ab0d06e39ca3c5f6889293c7b747e8f918325c69ddf201052e89b3e40ab56a0570158c1bc211cfc9e2d295cff5dfdd1ff46417f400967fb8db9645b
SSDEEP
3072:8b5r8no5mMbdHPcX0MgRVC3q9REX8nnzte:qrQGm90Ffr9REI5e
Checks for missing Authenticode signature.
resource |
---|
523cc4d741b8dc7f3d27b7a0b574d2b6b1484f8072b75f2bbbe819c76616ced7 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Direct3DCreate9
DirectDrawCreateEx
DirectSoundEnumerateW
DirectSoundCaptureEnumerateW
CloseHandle
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
FormatMessageW
GetComputerNameW
GetDateFormatW
GetEnvironmentVariableW
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetSystemDirectoryW
GetTickCount
GetTimeFormatW
GetVersionExW
GetWindowsDirectoryW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
K32EnumProcessModules
K32EnumProcesses
K32GetModuleBaseNameW
LoadLibraryW
LoadResource
MultiByteToWideChar
OpenProcess
SizeofResource
lstrcmpW
_vsnprintf
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromGUID2
SysAllocString
SysFreeString
VariantInit
VariantClear
VariantCopy
VariantChangeType
SafeArrayAccessData
SafeArrayUnaccessData
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcspn
strlen
wcschr
wcsrchr
EnumDisplayDevicesW
LoadStringW
wsprintfW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ