DllCanUnloadNow
DllGetClassObject
DllInstall
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5372647f4a3c9bb82044cd103bec9c96.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5372647f4a3c9bb82044cd103bec9c96.dll
Resource
win10v2004-20231222-en
Target
5372647f4a3c9bb82044cd103bec9c96
Size
3.6MB
MD5
5372647f4a3c9bb82044cd103bec9c96
SHA1
e0eba312d0bc9fbca90cbeddfaef4e21ed562b93
SHA256
e79dc285c12aaba9683e161382b59fd8cf765592a1bdd543fcfcb4caafe8f5fd
SHA512
f781f6387d0c60c57f8df32db057a25317c93290288553c45e28016c7d99c9c107bb35ad97f0b882fa9d48e68149fcae39537ad1e9e791e35e5246afcee02271
SSDEEP
98304:+u7LYIkVvl0zWISzGZGzybkn2CeYvwCTFaa5:n78VIWDy4n2Hyaa5
Checks for missing Authenticode signature.
resource |
---|
5372647f4a3c9bb82044cd103bec9c96 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_unlock
memmove_s
??1type_info@@UAE@XZ
__CxxFrameHandler3
_ltow_s
wcsrchr
wcscspn
wcsspn
_wcslwr_s
_vsnwprintf
free
wcschr
_vscwprintf
vswprintf_s
_itow_s
??_V@YAXPAX@Z
_wtoi
??_U@YAPAXI@Z
malloc
memset
wcsstr
_onexit
_lock
__dllonexit
memcpy_s
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
calloc
_wcsicmp
WinSqmAddToStream
WinSqmIsOptedIn
WinSqmIncrementDWORD
WinSqmSetDWORD
EtwLogTraceEvent
HeapReAlloc
CompareStringOrdinal
GetModuleFileNameW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
GetModuleHandleW
SizeofResource
RaiseException
DisableThreadLibraryCalls
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
HeapAlloc
GetProcessHeap
HeapFree
InterlockedIncrement
InterlockedDecrement
GetLocaleInfoW
GetUserDefaultLCID
GetAtomNameW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetProcAddress
LoadLibraryW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WideCharToMultiByte
GetThreadUILanguage
GetFileAttributesW
DeleteFileW
IsProcessInJob
K32EnumProcesses
ProcessIdToSessionId
OpenProcess
K32EnumProcessModules
K32GetModuleBaseNameW
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
MultiByteToWideChar
InterlockedExchange
HeapSize
FreeLibrary
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
CheckTokenMembership
FreeSid
RegEnumKeyExW
RegGetValueW
RegLoadMUIStringW
EventWrite
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
EventUnregister
EventRegister
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
AllocateAndInitializeSid
ord278
ord637
ord158
ord496
ord199
ord176
ord256
ord437
ord493
ord156
ord618
ord494
ord24
ord514
SHStrDupW
ord219
ord204
ord174
ord172
ShellExecuteExW
SHParseDisplayName
SHBindToObject
ord155
ord18
ord25
SHGetStockIconInfo
ShellExecuteW
StringFromGUID2
CoGetObject
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
VariantClear
SysAllocString
GetWindowLongW
DestroyWindow
KillTimer
UnregisterClassA
SendMessageTimeoutW
GetKeyState
SetTimer
DestroyIcon
LoadImageW
GetSystemMetrics
DefWindowProcW
SendMessageW
LoadStringW
SystemParametersInfoW
GetFocus
SendInput
?GetRoot@XProvider@DirectUI@@IAEPAVElement@2@XZ
?AddRef@XProvider@DirectUI@@UAGKXZ
?SetButtonClassAcceptsEnterKey@XProvider@DirectUI@@UAGJ_N@Z
?SetRegisteredDefaultButton@XProvider@DirectUI@@UAGJPAVElement@2@@Z
?ClickDefaultButton@XProvider@DirectUI@@UAGHXZ
?SetDefaultButtonTracking@XProvider@DirectUI@@UAGJ_N@Z
?ForceThemeChange@XProvider@DirectUI@@UAGJIJ@Z
?GetHostedElementID@XProvider@DirectUI@@UAGJPAG@Z
?FindElementWithShortcutAndDoDefaultAction@XProvider@DirectUI@@UAGHGH@Z
?CanSetFocus@XProvider@DirectUI@@UAGJPA_N@Z
?Navigate@XProvider@DirectUI@@UAGJHPA_N@Z
?SetFocus@XProvider@DirectUI@@UAGJPAVElement@2@@Z
?IsDescendent@XProvider@DirectUI@@UAGJPAVElement@2@PA_N@Z
?GetDesiredSize@XProvider@DirectUI@@UAGJHHPAUtagSIZE@@@Z
?SetParameter@XProvider@DirectUI@@UAGJABU_GUID@@PAX@Z
??1XProvider@DirectUI@@UAE@XZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?CreateDUI@XProvider@DirectUI@@UAGJPAVIXElementCP@2@PAPAUHWND__@@@Z
?SetHandleEnterKey@XProvider@DirectUI@@IAEX_N@Z
?Create@XResourceProvider@DirectUI@@SGJPAUHINSTANCE__@@PBG11PAPAV12@@Z
?Initialize@XProvider@DirectUI@@QAEJPAVElement@2@PAVIXProviderCP@2@@Z
?QueryInterface@XProvider@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?BackgroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?ForegroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z
??0IDataEngine@DirectUI@@QAE@XZ
??1IDataEngine@DirectUI@@UAE@XZ
??1IDataEntry@DirectUI@@UAE@XZ
??0IDataEntry@DirectUI@@QAE@XZ
?ClassProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?SetActive@Element@DirectUI@@QAEJH@Z
?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
??0XProvider@DirectUI@@QAE@XZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
??0ClassInfoBase@DirectUI@@QAE@XZ
??1Element@DirectUI@@UAE@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?GetAtomZero@Value@DirectUI@@SGPAV12@XZ
?GetStringNull@Value@DirectUI@@SGPAV12@XZ
?GetString@Value@DirectUI@@QAEPBGXZ
?GetValue@Element@DirectUI@@QAEPAVValue@2@PBUPropertyInfo@2@HPAUUpdateCache@2@@Z
?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?GetUnset@Value@DirectUI@@SGPAV12@XZ
??1CritSecLock@DirectUI@@QAE@XZ
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?Register@Element@DirectUI@@SGJXZ
?GetAtom@Value@DirectUI@@QAEGXZ
?Init@NavReference@DirectUI@@QAEXPAVElement@2@PAUtagRECT@@@Z
InitProcessPriv
UnInitProcessPriv
InitThread
??1ClassInfoBase@DirectUI@@UAE@XZ
?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z
?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
??0Element@DirectUI@@QAE@XZ
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?SetWidth@Element@DirectUI@@QAEJH@Z
?SetShortcut@Element@DirectUI@@QAEJH@Z
GetElementDataEntry
UnInitThread
?Release@Value@DirectUI@@QAEXXZ
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?SetSelection@Combobox@DirectUI@@QAEJH@Z
?AddString@Combobox@DirectUI@@QAEHPBG@Z
?GetClassInfoPtr@CCSysLink@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@CCCheckBox@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@ScrollViewer@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@CCBase@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@CCTrackBar@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@Combobox@DirectUI@@SGPAUIClassInfo@2@XZ
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?SetDataEngine@Repeater@DirectUI@@QAEXPAUIDataEngine@2@@Z
?SetSelected@Element@DirectUI@@QAEJ_N@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?Click@Button@DirectUI@@SG?AVUID@@XZ
?SelectionChange@Combobox@DirectUI@@SG?AVUID@@XZ
StrToID
DwmIsCompositionEnabled
SLGetWindowsInformationDWORD
DllCanUnloadNow
DllGetClassObject
DllInstall
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ