DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
514210270f09333ec64b74782de99844.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
514210270f09333ec64b74782de99844.dll
Resource
win10v2004-20231215-en
Target
514210270f09333ec64b74782de99844
Size
44KB
MD5
514210270f09333ec64b74782de99844
SHA1
5b850fbead041e58f82cfe63cc040ddbbcaf5e1d
SHA256
bce0f089390ae79cc8b378a6fdb13d0f3f39781bacb4d2a146ee9818cbdd0275
SHA512
fc0ec645a4a37c50fef34c802dab709d2f5ba11820c455d2d0f123db4a4cd6e7ac84777e61d4fc9e4b9085b0fc1e874edc1c6ace0cd064847bac7fe092e9d323
SSDEEP
768:7wv2A4cic/GsujK9N5Xv2WrPrHuNEeunu1LMX9ZgJxIjGoe2/AXK:c8wGsGK9zHDuKeuIAX9qJxc+UmK
Checks for missing Authenticode signature.
resource |
---|
514210270f09333ec64b74782de99844 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetLastError
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
CloseHandle
ReadFile
GetModuleFileNameA
CreateFileA
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
LocalAlloc
InterlockedExchange
GetVersionExA
RaiseException
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetFileSize
CharNextA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
SysStringLen
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
_except_handler3
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
wcslen
wcschr
swprintf
_wsplitpath
_wmakepath
wcscat
free
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ