DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c3739e7c3a6c24fe96f51b12ef934541edfffccdea2da49a4153805e6e90f5c1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c3739e7c3a6c24fe96f51b12ef934541edfffccdea2da49a4153805e6e90f5c1.dll
Resource
win10v2004-20231215-en
Target
c3739e7c3a6c24fe96f51b12ef934541edfffccdea2da49a4153805e6e90f5c1
Size
206KB
MD5
b01ec8383d3f7d9da64249115a452f6d
SHA1
108aad66f4aec406523fb2089dbe37288e54177c
SHA256
c3739e7c3a6c24fe96f51b12ef934541edfffccdea2da49a4153805e6e90f5c1
SHA512
e5bc054a889fa95a061362d9455f6cff020e2b5b398e14992763fbee3040881111f4074eba4c171d2a613c818020e67c607419da32fd8a924cf60299eb4b912f
SSDEEP
3072:SJy6L390/Au9v07oKjNHvygzkUFQ6jLzBl23p0iRBOhuAkAg0Fuc/OQhJdyi38x+:Sh390/Au67oKjN9zQSBcJBOGAOvCz8K
Checks for missing Authenticode signature.
resource |
---|
c3739e7c3a6c24fe96f51b12ef934541edfffccdea2da49a4153805e6e90f5c1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
SetEvent
LoadResource
SizeofResource
lstrcmpiW
CreateEventW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
MultiByteToWideChar
WaitForSingleObject
CloseHandle
LockResource
FindResourceExW
GetCurrentProcessId
GetCurrentThreadId
GetLastError
EncodePointer
GetThreadLocale
SetThreadLocale
GetCurrentProcess
WriteFile
GetTickCount
LoadLibraryW
GetModuleFileNameA
GetCommandLineA
CreateDirectoryW
CreateFileW
QueryPerformanceCounter
WideCharToMultiByte
LCMapStringW
GetSystemTimeAsFileTime
RaiseException
GetProcessHeap
HeapSize
DecodePointer
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
OutputDebugStringW
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
GetCPInfo
GetStringTypeW
IsDebuggerPresent
LocalFree
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetFileType
GetStdHandle
GetACP
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetStartupInfoW
UnhandledExceptionFilter
CharNextW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
SHGetSpecialFolderPathW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitializeEx
CoUninitialize
StringFromGUID2
CoMarshalInterface
CreateStreamOnHGlobal
CoCreateInstance
SysAllocStringLen
SysAllocString
DispCallFunc
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
RegisterTypeLi
VariantInit
VariantTimeToSystemTime
SysStringLen
SysFreeString
VariantClear
UnRegisterTypeLi
PathAppendW
PathFileExistsW
RpcAsyncInitializeHandle
RpcBindingFree
NdrAsyncClientCall
RpcStringBindingComposeW
RpcAsyncCancelCall
RpcStringFreeW
RpcAsyncCompleteCall
RpcBindingFromStringBindingW
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ