DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
34ae33aeb91c0d8fe5e9d8eab845d9b0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
34ae33aeb91c0d8fe5e9d8eab845d9b0.dll
Resource
win10v2004-20231215-en
Target
34ae33aeb91c0d8fe5e9d8eab845d9b0
Size
350KB
MD5
34ae33aeb91c0d8fe5e9d8eab845d9b0
SHA1
507be6b27897bdcf678dabe1da689195f9940e1f
SHA256
c1ba97a0672a6e6d113c649632a9414aa510a6a6a020b783adefd5290f1f50b7
SHA512
4bd080404771b06b5d6398338688b4d0f6f851d48e847d4a22c4e82d5932cf9ba7eda244190247f245901b09490e0a02a47e2d75caed3bb854be5f02d12571a6
SSDEEP
6144:l1nwdqokkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk:lK
Checks for missing Authenticode signature.
resource |
---|
34ae33aeb91c0d8fe5e9d8eab845d9b0 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrCpyW
StrCatW
StrCpyNW
StrNCatW
StrCmpW
StrCmpIW
StrStrW
CreateThread
LoadLibraryExA
CreateMutexA
ResetEvent
ExitThread
CreateFileMappingW
GetTickCount
Sleep
GetProcessHeap
lstrcatA
lstrcpyA
InitializeCriticalSection
GetBinaryTypeW
CloseHandle
GetLastError
lstrcpynA
GetProcAddress
FreeLibrary
LoadLibraryA
WideCharToMultiByte
GetModuleFileNameA
MultiByteToWideChar
GetTimeFormatA
GetDateFormatA
lstrcmpA
lstrcmpiA
GetModuleHandleW
PulseEvent
CreateEventA
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
WaitForSingleObject
DispatchMessageW
TranslateMessage
GetMessageW
SetWindowsHookExW
CreateWindowExW
MoveWindow
SendMessageW
CallNextHookEx
GetClientRect
ShowWindow
DefWindowProcW
DestroyWindow
GetSystemMetrics
wsprintfA
GetWindowRect
SetTimer
GetClassNameA
GetWindow
RegisterClassExW
StringFromGUID2
CoCreateGuid
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocStringByteLen
VariantClear
VariantCopy
SafeArrayDestroy
SysStringLen
SafeArrayLock
SafeArrayUnlock
SysAllocString
VariantInit
SysAllocStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ