BreateDecoder
BreateEncoder
BreateObject
BetHandlerProperty
BetHandlerProperty2
BetHashers
BetIsArc
BetMethodProperty
BetMsDocType
BetNumberOfFormats
BetNumberOfMethods
BetCaseSensitive
BetCodecs
BetLargePageMode
Enter
Static task
static1
Behavioral task
behavioral1
Sample
nihil.b.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
nihil.b.dll
Resource
win10v2004-20231130-en
Target
nihil.b.dll
Size
2.1MB
MD5
e4f44886549b3134647067db3d73735e
SHA1
09e5d900e2bee7b318829189bc2ad29001b0bc96
SHA256
c7a147eb873eac167783c640e2308006396a6118ef1fbfc023db7ab2ae0f8369
SHA512
31fbaa77ed4374baba15c9a79f90f6de638e60a02e6671ec989b9909e5ef24e233e9c814a12b4aae488f596800b12b8c7b9dde80722c6733e16e175d87ce4bae
SSDEEP
49152:KggggM9EmMJGA70NQ0tR2ftVT2mzfjN9D5w8Mev7EP29hP9Ug8YD0ldmDnMpU:dyJGAAS0MbT2mzLN9D5w8MU9DF+u
Checks for missing Authenticode signature.
resource |
---|
nihil.b.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
VirtualAlloc
VirtualFree
GetModuleHandleW
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
GetLastError
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CloseHandle
CreateEventW
CreateSemaphoreW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
GetCurrentThreadId
SetLastError
SetFileTime
GetTickCount
GetSystemDirectoryW
GetTempPathW
GetWindowsDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
RemoveDirectoryW
CreateFileW
SetFileAttributesW
DeleteFileW
MoveFileW
FindClose
GetLogicalDriveStringsW
GetModuleHandleA
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindFirstChangeNotificationW
FindCloseChangeNotification
GetFileSize
WriteFile
ReadFile
SetEndOfFile
SetFilePointer
CompareFileTime
GlobalMemoryStatus
GetProcessAffinityMask
GetCurrentProcess
GetSystemInfo
GetSystemTimeAsFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
WaitForMultipleObjects
FreeLibrary
LoadLibraryW
QueryPerformanceCounter
DecodePointer
InterlockedDecrement
RaiseException
InitializeCriticalSectionAndSpinCount
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
OutputDebugStringA
GetStringTypeW
HeapSize
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
SetEnvironmentVariableW
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
OutputDebugStringW
LocalFree
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetModuleFileNameW
HeapFree
HeapAlloc
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CharPrevExA
CharUpperW
UnregisterClassW
SysAllocStringByteLen
SysFreeString
VariantCopy
VariantClear
SysAllocStringLen
SysAllocString
GetErrorInfo
VariantInit
VariantChangeType
SetErrorInfo
SysStringByteLen
SysStringLen
CreateErrorInfo
BreateDecoder
BreateEncoder
BreateObject
BetHandlerProperty
BetHandlerProperty2
BetHashers
BetIsArc
BetMethodProperty
BetMsDocType
BetNumberOfFormats
BetNumberOfMethods
BetCaseSensitive
BetCodecs
BetLargePageMode
Enter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ