DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
GetMenuFlags
IsRegistServer
SetAdminMode
SetMenuFlags
Static task
static1
Behavioral task
behavioral1
Sample
4c7f00c8e39c0b378c3c2829f8cc72837ecac72bbe56fd9aeb29573c8abc8e54.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
4c7f00c8e39c0b378c3c2829f8cc72837ecac72bbe56fd9aeb29573c8abc8e54.dll
Resource
win10v2004-20231127-en
Target
4c7f00c8e39c0b378c3c2829f8cc72837ecac72bbe56fd9aeb29573c8abc8e54
Size
199KB
MD5
345c1cebb754a3a91fff69c999bd850f
SHA1
7c91cfb3a6217d1d1378af5d72ea413c8e875127
SHA256
4c7f00c8e39c0b378c3c2829f8cc72837ecac72bbe56fd9aeb29573c8abc8e54
SHA512
45622e31c3bd98590d197ad1141e5ba8ae5b82601fc7eb36d5130b1530135b5a5c889346798502ef56a82f56ef2491bb9b7902df5cdf5e707776d9042f5d0f08
SSDEEP
3072:1IIIIQ9r1YEkZ6BQkiHbqRIV2I/s6aoJ6WSxpNOkzZ4KFQmkKOtk:1IIIIQ9r1GZ6BQ/Vts6GpNj/nkKOtk
Checks for missing Authenticode signature.
resource |
---|
4c7f00c8e39c0b378c3c2829f8cc72837ecac72bbe56fd9aeb29573c8abc8e54 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFullPathNameW
CreateFileW
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
GetTickCount
FindClose
MultiByteToWideChar
WideCharToMultiByte
VirtualProtect
GetCommandLineW
GetVersionExA
GetEnvironmentStringsW
GetCurrentThreadId
WriteConsoleW
GetFileType
RaiseException
GetSystemInfo
VirtualQuery
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
CreateEventW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapAlloc
GetACP
LCMapStringW
GetStringTypeW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
SetFilePointerEx
DecodePointer
GetEnvironmentVariableW
GlobalUnlock
CreateProcessW
GlobalLock
CloseHandle
DuplicateHandle
GetFileAttributesW
CreatePipe
GetThreadLocale
GetModuleFileNameW
WriteFile
GetStdHandle
GetCurrentProcess
GetLongPathNameW
GetSystemDefaultLCID
SelectObject
CreateCompatibleDC
GetClipRgn
CreateRectRgn
DeleteDC
SetTextColor
SetBkMode
SelectClipRgn
DeleteObject
GetObjectType
CreateDIBSection
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
GetMenuFlags
IsRegistServer
SetAdminMode
SetMenuFlags
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ