Create_LEDM_Fax_JobFactory
DllCanUnloadNow
DllGetClassObject
RunDLLEntryW
Static task
static1
Behavioral task
behavioral1
Sample
21d3ac2bf9ed1f73d0b1ece724fac79a4cc11d44db8723e38838bba18f21f6a0.dll
Resource
win7-20231215-en
Target
21d3ac2bf9ed1f73d0b1ece724fac79a4cc11d44db8723e38838bba18f21f6a0
Size
5.6MB
MD5
feffadc8129b656a2db9d658e12da04e
SHA1
34f0d89c611b43e84043e006791694b41cd02b94
SHA256
21d3ac2bf9ed1f73d0b1ece724fac79a4cc11d44db8723e38838bba18f21f6a0
SHA512
d1b81fbe4352a0a72e5fda79212764e9f2b2cf56a8fcbb9c57f4e7f3009d28bc3f81db0bded4f0ff597c74270dc0d6d90601922f5ed9e4b69f3953402128b830
SSDEEP
98304:D5HBPdjGHxXTebx5mNzyPoyLYB3ZMMrMw4:hBMRXTebxlPoyLc3v4
Checks for missing Authenticode signature.
resource |
---|
21d3ac2bf9ed1f73d0b1ece724fac79a4cc11d44db8723e38838bba18f21f6a0 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
OutputDebugStringW
GetCurrentThreadId
QueryPerformanceCounter
OpenProcess
GetFileAttributesExW
GetCommandLineW
GetTempFileNameW
GetLongPathNameW
SearchPathW
FormatMessageW
LocalFree
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceFrequency
GetVersionExW
CreateProcessW
GetTempPathW
GetDiskFreeSpaceExW
CreateThread
GetExitCodeThread
GetExitCodeProcess
GetCurrentProcess
TerminateThread
OpenEventW
ResetEvent
GetLocalTime
GetSystemTime
GetFileAttributesW
CreateDirectoryW
GetShortPathNameW
GetFileSizeEx
CreateNamedPipeW
ConnectNamedPipe
DisconnectNamedPipe
WaitNamedPipeW
PeekNamedPipe
GetEnvironmentVariableW
TryEnterCriticalSection
WaitForMultipleObjects
CreatePipe
GetStartupInfoW
GlobalMemoryStatusEx
FlushViewOfFile
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetUserDefaultLCID
GetLocaleInfoW
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
GetComputerNameExW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetUserDefaultLangID
LocalAlloc
ProcessIdToSessionId
GlobalLock
GlobalUnlock
GetFileTime
DeviceIoControl
GetSystemDirectoryW
MoveFileExW
CopyFileW
SetFileAttributesW
VerifyVersionInfoW
lstrcmpiW
FileTimeToSystemTime
GetCurrentProcessId
GetFullPathNameW
RemoveDirectoryW
MoveFileW
GetPrivateProfileStringW
GetPrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStringA
CreateSemaphoreW
ReleaseSemaphore
lstrcpyW
lstrcatW
GetFileSize
FlushFileBuffers
lstrlenW
GetACP
FreeResource
GetDateFormatW
GetTimeFormatW
InterlockedCompareExchange
SetErrorMode
GetStringTypeW
EncodePointer
IsDebuggerPresent
ExitThread
LoadLibraryExW
GetCommandLineA
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
IsValidCodePage
GetOEMCP
GetStdHandle
GetFileType
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetStdHandle
FileTimeToLocalFileTime
GetFileInformationByHandle
WriteConsoleW
SetEndOfFile
SetEnvironmentVariableA
FormatMessageA
InitializeCriticalSection
CreateEventW
SetEvent
WaitForSingleObject
SizeofResource
LockResource
LoadResource
FindResourceExW
CreateFileMappingW
MapViewOfFile
CreateMutexW
ReleaseMutex
OpenFileMappingW
ExpandEnvironmentStringsW
GetModuleFileNameW
DeleteFileW
ReadFile
CloseHandle
WriteFile
CreateFileW
DeleteCriticalSection
DecodePointer
HeapSize
GetLastError
RaiseException
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
InterlockedDecrement
SetThreadExecutionState
CancelIo
GetOverlappedResult
FindResourceW
UnmapViewOfFile
OpenMutexW
InterlockedIncrement
GlobalFree
GlobalAlloc
SetLastError
Sleep
GetTickCount
MsgWaitForMultipleObjectsEx
WaitForInputIdle
GetAsyncKeyState
OpenWindowStationW
CloseWindowStation
GetProcessWindowStation
SetProcessWindowStation
GetThreadDesktop
SetThreadDesktop
OpenDesktopW
CloseDesktop
ExitWindowsEx
AllowSetForegroundWindow
PeekMessageW
MsgWaitForMultipleObjects
GetSystemMetrics
SystemParametersInfoW
LoadIconW
DestroyIcon
RegisterWindowMessageW
SetTimer
GetMessageW
SendMessageCallbackW
GetKeyState
wsprintfW
GetDesktopWindow
GetActiveWindow
SetForegroundWindow
IsWindowVisible
ShowWindow
GetLastActivePopup
DispatchMessageW
TranslateMessage
CreateSolidBrush
DeleteDC
GetStockObject
CreateICW
CreateCompatibleDC
SelectObject
SetTextColor
SetBkColor
ExtEscape
EngCreatePalette
DeleteObject
CreateFontW
GetBitmapBits
TextOutW
SetTextAlign
GetTextMetricsW
CreateBitmap
SetPrinterW
ClosePrinter
EnumJobsW
OpenPrinterW
SetJobW
FindClosePrinterChangeNotification
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EndDocPrinter
EndPagePrinter
WritePrinter
GetJobW
GetPrinterW
StartPagePrinter
StartDocPrinterW
EnumPortsW
AddPrinterW
DeletePrinter
EnumPrintersW
GetPrinterDataExW
SetPrinterDataExW
AddPrinterDriverW
GetPrinterDriverW
XcvDataW
DeletePrinterDriverExW
GetPrinterDriverDirectoryW
EnumPrinterDriversW
ord204
ord203
AddMonitorW
DeleteMonitorW
EnumMonitorsW
DocumentPropertiesW
CoInitialize
CLSIDFromString
GetHGlobalFromStream
PropVariantCopy
CoTaskMemAlloc
OleRun
CLSIDFromProgID
CreateStreamOnHGlobal
CoCreateGuid
OleInitialize
CoUninitialize
CoInitializeEx
OleUninitialize
CoInitializeSecurity
CoSetProxyBlanket
PropVariantClear
CoCreateInstance
FreePropVariantArray
SHCreateStreamOnFileEx
PathIsFileSpecW
PathFindFileNameW
PathRemoveFileSpecW
PathIsDirectoryW
PathFindExtensionW
NetWkstaGetInfo
freeaddrinfo
WSAAddressToStringW
WSAStartup
inet_addr
WSAGetLastError
getaddrinfo
send
recv
accept
listen
bind
WSADuplicateSocketW
WSACloseEvent
closesocket
shutdown
WSAResetEvent
WSAEnumNetworkEvents
WSAConnect
WSAEventSelect
WSACreateEvent
setsockopt
WSASocketW
WSAStringToAddressW
ioctlsocket
connect
select
htons
WSACleanup
getsockopt
gethostbyname
__WSAFDIsSet
socket
GetModuleBaseNameW
EnumProcesses
GetModuleFileNameExW
EnumProcessModules
GetUserNameExW
ord72
ord94
ord141
ord8
GetUserNameW
DuplicateToken
ImpersonateLoggedOnUser
ConvertStringSecurityDescriptorToSecurityDescriptorW
AdjustTokenPrivileges
LookupPrivilegeValueW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
SetEntriesInAclW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
BackupEventLogW
CloseEventLog
OpenEventLogW
FreeSid
AllocateAndInitializeSid
CreateProcessAsUserW
ControlService
QueryServiceStatus
QueryServiceConfigW
ChangeServiceConfigW
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RevertToSelf
CheckTokenMembership
OpenProcessToken
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
SHGetSpecialFolderPathW
ExtractIconW
SafeArrayUnaccessData
SysAllocString
SysFreeString
SysStringLen
VariantInit
VariantClear
DispCallFunc
SafeArrayGetVartype
SysStringByteLen
SysAllocStringByteLen
SafeArrayCopy
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
SafeArrayUnlock
SafeArrayRedim
SafeArrayCreate
SafeArrayLock
GetErrorInfo
VariantChangeType
SafeArrayCreateVector
SafeArrayGetLBound
VariantCopy
InternetOpenW
InternetSetOptionW
HttpSendRequestW
HttpQueryInfoW
HttpQueryInfoA
InternetConnectW
InternetErrorDlg
InternetQueryOptionW
InternetCloseHandle
InternetReadFileExA
HttpOpenRequestW
HttpAddRequestHeadersW
SetupDiBuildDriverInfoList
SetupDiDestroyDriverInfoList
SetupDiRemoveDevice
SetupDiGetDriverInfoDetailW
SetupOpenInfFileW
SetupFindFirstLineW
SetupDiSetClassInstallParamsW
CMP_WaitNoPendingInstallEvents
SetupDiGetSelectedDriverW
SetupCloseInfFile
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_PropertyW
CM_Disable_DevNode
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiCallClassInstaller
SetupDiOpenClassRegKey
SetupDiCreateDevRegKeyW
SetupDiOpenDevRegKey
SetupGetLineTextW
IpRenewAddress
IpReleaseAddress
GetInterfaceInfo
GetAdaptersAddresses
NotifyAddrChange
IcmpCloseHandle
IcmpSendEcho
IcmpCreateFile
GetIfEntry
GetAdaptersInfo
AddIPAddress
DeleteIPAddress
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipCloneImage
GdipSaveImageToFile
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipDisposeImage
GdipAlloc
GdipFree
GdipDeleteGraphics
UuidToStringA
UuidCreate
CryptUnprotectData
CertAddEncodedCertificateToStore
CertDeleteCertificateFromStore
CertCloseStore
CertOpenStore
Create_LEDM_Fax_JobFactory
DllCanUnloadNow
DllGetClassObject
RunDLLEntryW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE