DllRegisterServer
DllUnregisterServer
PauseW
ResumeServer
ResumeW
StartServer
StartW
StopServer
StopW
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
c1aaa90ede86800a6a6b8fa195f8f36a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c1aaa90ede86800a6a6b8fa195f8f36a.dll
Resource
win10v2004-20231215-en
Target
c1aaa90ede86800a6a6b8fa195f8f36a
Size
131KB
MD5
c1aaa90ede86800a6a6b8fa195f8f36a
SHA1
d54d282bc2b57b4ffecd402ebb4946238ff8c5b1
SHA256
e73ae8c6381a12bbd0f097b91e780739f1405a44e7174759d5be052b96d882d4
SHA512
a460ff8f9a3eaa2470a9a0f4e507648ac515b17c54bd6587e2782442c011d4821c4d407f30c0bbaeeb26f9c87e1d629a9e8ac32676daea9ab64e3fdeef7626b5
SSDEEP
3072:0XBeyl2hZ9YDPqvQ21shmuTSIRYdaNTljUijgCoHG:0XBeylw9Y+vL+vThRYdaTjUix
Checks for missing Authenticode signature.
resource |
---|
c1aaa90ede86800a6a6b8fa195f8f36a |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetLastError
HeapAlloc
GetProcessHeap
GetSystemTime
lstrcmpA
CreateMutexA
ExitProcess
GlobalAlloc
GetDateFormatA
GetCommandLineA
HeapFree
Sleep
VirtualAlloc
VirtualProtect
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetLastError
LeaveCriticalSection
TlsGetValue
TlsSetValue
FreeLibrary
GetProcAddress
LoadLibraryExW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetModuleHandleW
GetModuleHandleExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
RtlUnwindEx
RegisterClassA
LoadMenuA
GetMenu
SetMenu
GetMenuStringA
DrawMenuBar
ShowWindow
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuA
DeleteMenu
InsertMenuItemA
CreateMenu
GetKeyboardLayout
ActivateKeyboardLayout
MessageBoxA
PeekMessageA
GetOpenFileNameA
GetSaveFileNameA
DllRegisterServer
DllUnregisterServer
PauseW
ResumeServer
ResumeW
StartServer
StartW
StopServer
StopW
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ