DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
f62df9bd54fa43ac3d60ac3b34da7a9938bab2d17336770314224bfbcafb293d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f62df9bd54fa43ac3d60ac3b34da7a9938bab2d17336770314224bfbcafb293d.dll
Resource
win10v2004-20231222-en
Target
f62df9bd54fa43ac3d60ac3b34da7a9938bab2d17336770314224bfbcafb293d
Size
459KB
MD5
13c1394f61554fb358518fba8dfd3e94
SHA1
7561559cd37b4a39c810f74ccaff9b1368a6a484
SHA256
f62df9bd54fa43ac3d60ac3b34da7a9938bab2d17336770314224bfbcafb293d
SHA512
96920f1e8980bb713e8025396b70a0f3156b65d5be9c8e303d03abaa6039c7698a152db1d3e7bc2fb68665875b90dd36489d2ba9706af6e9048fb417549f18ee
SSDEEP
12288:SSsMQcgwjOFGhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhmIx4SK0F9r:d3gwjMgcMr
Checks for missing Authenticode signature.
resource |
---|
f62df9bd54fa43ac3d60ac3b34da7a9938bab2d17336770314224bfbcafb293d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ConvertThreadToFiber
CreateFiber
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
SleepEx
SwitchToFiber
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcmp
memcpy
memset
rand
realloc
strerror
strlen
strncmp
vfprintf
wcslen
wcsncat
wcsncpy
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ