DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
114e1b61f74bd9cd2264b5a8bf6d5195.dll
Resource
win7-20231129-en
Target
114e1b61f74bd9cd2264b5a8bf6d5195
Size
168KB
MD5
114e1b61f74bd9cd2264b5a8bf6d5195
SHA1
4ea2176b0fbf2e7c0c47f521f0b65b89111b4f93
SHA256
fdfbd02500617cbc22c6e9e0d9436c29412cb8c6182f013906ebefc63ffb2cee
SHA512
9345960d4131d0d04961424919df88d38406efecb06767bcd4f6d077bceadaa3afbed86b403cf4aa968ef2090d4b4df766311f84ddb66e8cd971e42b3c1bcfb8
SSDEEP
3072:c+ymPQ38mtBMzgxpvvdoZpSjXfW8Dkfg:ccQ38AxpOZEzO8Dj
Checks for missing Authenticode signature.
resource |
---|
114e1b61f74bd9cd2264b5a8bf6d5195 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindFirstChangeNotificationW
TlsGetValue
GetCPInfo
GetSystemTimeAsFileTime
Sleep
SetSystemPowerState
GetModuleFileNameW
VirtualProtectEx
RemoveDirectoryW
TlsAlloc
CloseHandle
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
SetLastError
MultiByteToWideChar
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetStdHandle
WriteFile
HeapSize
GetTimeZoneInformation
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
CompareStringW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ