DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
e
i
l
r
Static task
static1
Behavioral task
behavioral1
Sample
01d70a4709d8460faa5ceeda7c441dc6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01d70a4709d8460faa5ceeda7c441dc6.dll
Resource
win10v2004-20231215-en
Target
01d70a4709d8460faa5ceeda7c441dc6
Size
264KB
MD5
01d70a4709d8460faa5ceeda7c441dc6
SHA1
6d45b2ed8ed9656da48b98b112d3698568806b1a
SHA256
d00a69920e5e6a972d7e045712fba71b88b5143d19626c0963f828f29c81ff84
SHA512
8f5a3cbaaf5555b66a8b4a3bc4fb6a16692cce1b4c14bfb7ee94f0dc2fbc1fde9f145e71f37af9f1d62efd45670b46eced2b3b1572088e546af51e06334ece94
SSDEEP
3072:RmTzE1QoObYqtK4ei1wabZcoFcAxLVaRvy3rYOYBDQ3tD3I4n9I3ntx6wNC1:RmTzW/LqtK4e6bmoFbavoABE38ywNC1
Checks for missing Authenticode signature.
resource |
---|
01d70a4709d8460faa5ceeda7c441dc6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
InterlockedDecrement
InterlockedIncrement
GetProcAddress
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
ResetEvent
WaitForSingleObject
OpenEventW
CreateMutexW
EnterCriticalSection
LeaveCriticalSection
CreateEventW
GetLastError
SetWaitableTimer
CancelWaitableTimer
CreateWaitableTimerW
OpenWaitableTimerW
lstrcpynA
GetTickCount
MultiByteToWideChar
CreateThread
lstrlenA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
FreeLibraryAndExitThread
OpenMutexW
DisableThreadLibraryCalls
GetVersionExW
ReleaseMutex
lstrcmpW
FreeLibrary
LocalFree
CreateFileW
LocalAlloc
SetEndOfFile
WriteFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WaitForMultipleObjects
FlushFileBuffers
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
lstrcpyA
EnumSystemLocalesA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetOEMCP
VirtualQuery
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
GetStdHandle
SetFilePointer
GetFileSize
ReadFile
WideCharToMultiByte
SystemTimeToFileTime
lstrcatW
lstrcpyW
CreateProcessW
CloseHandle
GetLocalTime
lstrlenW
lstrcpynW
GetSystemWindowsDirectoryW
GetVolumeInformationW
IsValidLocale
OpenProcess
VirtualAlloc
VirtualFree
HeapCreate
GetLocaleInfoW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
IsValidCodePage
HeapDestroy
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
GetProcessHeap
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
InterlockedCompareExchange
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetWindowModuleFileNameW
SetWindowsHookExW
PostMessageW
CallNextHookEx
UnregisterClassA
SetWindowPos
SetWindowTextW
EnumChildWindows
FindWindowExW
SendMessageW
UpdateWindow
IsCharAlphaNumericW
IsCharAlphaW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
wsprintfW
LockSetForegroundWindow
RegEnumValueW
RegFlushKey
RegNotifyChangeKeyValue
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
SHGetFolderPathW
ord680
SHCreateDirectoryExW
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoCreateInstance
OleRun
StringFromCLSID
CoCreateGuid
CoGetInterfaceAndReleaseStream
VariantInit
LoadRegTypeLi
LoadTypeLi
SysAllocStringByteLen
SysAllocString
SysFreeString
SysStringByteLen
VariantClear
SysStringLen
GetErrorInfo
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocStringLen
VariantCopy
DispCallFunc
StrStrIW
UrlUnescapeW
UrlEscapeW
StrStrIA
wnsprintfW
StrRStrIW
StrCmpNW
PathFileExistsW
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
e
i
l
r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ