DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
GetMenuFlags
IsRegistServer
SetAdminMode
SetMenuFlags
Static task
static1
Behavioral task
behavioral1
Sample
a575f30e6cd3c038f0b514247a75ab986c273d44555b0487875d17f1446e8f4f.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a575f30e6cd3c038f0b514247a75ab986c273d44555b0487875d17f1446e8f4f.dll
Resource
win10v2004-20231127-en
Target
a575f30e6cd3c038f0b514247a75ab986c273d44555b0487875d17f1446e8f4f
Size
271KB
MD5
67c25b478e705e701ba32e0b33bcd799
SHA1
3520bbe9fd623e9cf949ec22edfdcc856c550de6
SHA256
a575f30e6cd3c038f0b514247a75ab986c273d44555b0487875d17f1446e8f4f
SHA512
32493078b03d4361bbfc4fdabf13c5814df11584f0c4f0afce2a757651b6c0c205eddc6358a06c7f4eaec7952036a6a328c740a2ac427647658f1b065d2d6bf0
SSDEEP
6144:82n7m7fGtlqd5GNSwTa9gN9M2OazzxQwO2:eGtlqYTa9sXOazNa2
Checks for missing Authenticode signature.
resource |
---|
a575f30e6cd3c038f0b514247a75ab986c273d44555b0487875d17f1446e8f4f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetFullPathNameW
CreateFileW
GetLastError
FindFirstFileExW
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
GetTickCount
FindNextFileW
FindClose
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
GetVersionExA
GetEnvironmentStringsW
GetCurrentThreadId
WriteConsoleW
GetFileType
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
FreeEnvironmentStringsW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
GetEnvironmentVariableW
GlobalUnlock
CreateProcessW
GlobalLock
CloseHandle
DuplicateHandle
GetFileAttributesW
CreatePipe
GetThreadLocale
GetModuleFileNameW
WriteFile
GetStdHandle
GetCurrentProcess
GetLongPathNameW
GetSystemDefaultLCID
SelectObject
CreateCompatibleDC
GetClipRgn
CreateRectRgn
DeleteDC
SetTextColor
SetBkMode
SelectClipRgn
DeleteObject
GetObjectType
CreateDIBSection
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
GetMenuFlags
IsRegistServer
SetAdminMode
SetMenuFlags
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ