DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
Static task
static1
Behavioral task
behavioral1
Sample
1ddec479b1a7579fc52c734510473aa3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ddec479b1a7579fc52c734510473aa3.dll
Resource
win10v2004-20231222-en
Target
1ddec479b1a7579fc52c734510473aa3
Size
137KB
MD5
1ddec479b1a7579fc52c734510473aa3
SHA1
960b1b4292c2a73fbe3c04a1ff938ffd76981620
SHA256
087153ed5bb9bb9807e37a8fd745a16a634497a842896f232ab4cfb54197ba00
SHA512
02c67f543a9ec456679e5fa30f9a2ea453bed95393d96de5f409605626cf9d968b50ad27151fb925253029d20a43507020bc6adf20b2ae037471ea2fe46177de
SSDEEP
3072:wUJ9sXDS+LpeJ+zbCWS6FFswY0uYGpCM:ZsXDNBzbC76FFsjE
Checks for missing Authenticode signature.
resource |
---|
1ddec479b1a7579fc52c734510473aa3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ClearEventLogA
ReadEventLogA
RegCloseKey
RegNotifyChangeKeyValue
RegisterEventSourceA
CloseHandle
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DisconnectNamedPipe
EnterCriticalSection
FindClose
FindNextStreamW
FlushFileBuffers
GetBinaryTypeA
GetCommModemStatus
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetHandleInformation
GetLargestConsoleWindowSize
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
PurgeComm
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCommBreak
SetConsoleMode
SetEvent
SetNamedPipeHandleState
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
lstrlenA
__iob_func
_amsg_exit
_initterm
_lock
_snprintf
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ