DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
18c263d3dc3ce57743582325059cbe29.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18c263d3dc3ce57743582325059cbe29.dll
Resource
win10v2004-20231215-en
Target
18c263d3dc3ce57743582325059cbe29
Size
500KB
MD5
18c263d3dc3ce57743582325059cbe29
SHA1
37ab65d9fffda5956cfcdf1281318986aee18898
SHA256
cb60b4e7865d5a3c46bebd7ee87f70d92c7fda4ec2574cfe95df85dd9f18360e
SHA512
000867577a1ec9c0fe91617215b686d76265f05b0f311cfd1287cde41b910bb94da94667d17871aa2de54f4a9373f27c97aa05bb79b3b2faea2222d4ea5a039c
SSDEEP
6144:1Il2baAIdfQMss79EpIkLawaeuUF84xeMlVcG2KdC8k/XxXXE6YN:uVMspEGwaoVcG2uCH/XGd
Checks for missing Authenticode signature.
resource |
---|
18c263d3dc3ce57743582325059cbe29 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ungetc
_isatty
_write
_lseeki64
_fileno
_read
__pioinfo
__badioinfo
wcstombs
free
memcpy
??3@YAXPAX@Z
realloc
_wcsdup
memset
??2@YAPAXI@Z
memmove
wcsncmp
wcschr
ferror
wctomb
_itoa
_snprintf
localeconv
isxdigit
isleadbyte
mbtowc
calloc
iswctype
_onexit
_lock
__dllonexit
_unlock
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
_iob
__mb_cur_max
_errno
_isnan
_ftime
fmod
atan2
pow
tan
sqrt
sin
log
exp
cos
atan
asin
acos
bsearch
_ismbblead
_wcslwr
isalpha
isdigit
_wasctime
ceil
_tzset
localtime
floor
_CIfmod
_vsnwprintf
iswxdigit
wcsstr
_CIlog
towlower
atoi
wcscspn
_statusfp
_clearfp
strrchr
_ultow
_ltow
longjmp
strtoul
_wcsicmp
_control87
_purecall
_setjmp3
_wcsnicmp
malloc
VariantChangeTypeEx
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
CreateTypeLi
SafeArrayRedim
LoadTypeLibEx
GetActiveObject
SysAllocString
SysAllocStringLen
VariantClear
SysFreeString
CreateTypeLib2
LoadRegTypeLi
VariantCopy
VariantCopyInd
SysStringByteLen
SysStringLen
SysAllocStringByteLen
VariantInit
SafeArrayDestroy
SafeArrayCreate
GetErrorInfo
LoadTypeLi
CreateBindCtx
MkParseDisplayName
BindMoniker
CLSIDFromString
StringFromCLSID
CLSIDFromProgID
CoGetClassObject
CoTaskMemFree
CoCreateInstance
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegSetValueA
RegQueryValueExA
RegOpenKeyA
RegQueryValueExW
RegOpenKeyExW
FindResourceExW
LoadLibraryExW
MapViewOfFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
GetNumberFormatW
GetNumberFormatA
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
GetLocaleInfoW
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetLastError
GetVersion
MulDiv
GetSystemTime
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetTickCount
GetComputerNameA
MultiByteToWideChar
GetProcAddress
TlsSetValue
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
FreeLibrary
TlsFree
TlsAlloc
GetVersionExA
LoadLibraryExA
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetModuleFileNameW
GetACP
GetSystemDefaultLCID
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetUserDefaultLCID
GetCurrentThreadId
InterlockedExchange
TlsGetValue
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
CreateFileMappingW
CreateFileW
GetVersionExW
UnmapViewOfFile
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
FindResourceW
GetTimeZoneInformation
SearchPathW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ