DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6aad62732fcda3cd32e2a3aa25e0f931d5a05e2efbc9672bdb8cd742bc7c0e6a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6aad62732fcda3cd32e2a3aa25e0f931d5a05e2efbc9672bdb8cd742bc7c0e6a.dll
Resource
win10v2004-20231222-en
Target
6aad62732fcda3cd32e2a3aa25e0f931d5a05e2efbc9672bdb8cd742bc7c0e6a
Size
127KB
MD5
c2107df4b6d23ed0065bf4fa521e8e9d
SHA1
649cfabed25cd43c092036462ba5f8bb42265100
SHA256
6aad62732fcda3cd32e2a3aa25e0f931d5a05e2efbc9672bdb8cd742bc7c0e6a
SHA512
c835aba4cf09d6c8814a55bc3ce014b49f1ac6d633c3f706ffc1eaccd4a8bdf99c6087485b18fe60c3c339088663f60644ca4ab0b456136075178e7e49ef2fd6
SSDEEP
3072:pX2CMyVluKOSTm9Xsamy7nFJF9h9JqZFJtHpMp:FuQTmhmy7B9JqZFJt
Checks for missing Authenticode signature.
resource |
---|
6aad62732fcda3cd32e2a3aa25e0f931d5a05e2efbc9672bdb8cd742bc7c0e6a |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord12336
ord300
ord310
ord1520
ord4984
ord311
ord359
ord13700
ord1058
ord2300
ord3897
ord3534
ord1706
ord14164
ord4977
ord14186
ord948
ord970
ord2189
ord1402
ord12416
ord1952
ord923
ord12415
ord13017
ord13703
ord922
ord2384
ord4746
ord2931
ord1519
ord1517
ord306
ord316
ord7991
ord1652
ord6345
ord1440
ord1498
ord265
ord266
ord2329
ord2327
ord2333
ord3783
ord1038
ord1500
ord1401
ord323
ord1043
ord2144
ord8273
ord7470
ord1459
ord8191
ord12028
ord10228
ord12701
ord12638
ord4519
ord7808
ord8130
ord5212
ord2430
ord12318
ord12317
ord14329
ord7734
ord14327
ord9203
ord4084
ord4023
ord12720
ord7753
ord1978
ord11766
ord11765
ord14201
ord12307
ord7811
ord14401
ord6192
ord14403
ord6194
ord14402
ord6193
ord987
ord6694
ord3786
ord5765
ord12020
ord8025
ord12032
ord12000
ord5107
ord5404
ord5614
ord9155
ord5380
ord5617
ord5110
ord5266
ord5091
ord7537
ord7538
ord7528
ord5264
ord8027
ord1501
ord324
ord1044
ord2305
ord2352
ord2355
ord2318
ord2354
ord484
ord2211
ord2316
ord2128
ord2242
ord2343
ord485
ord10047
ord9016
strcpy_s
strcat_s
strlen
wcslen
memset
_mbsnbcpy_s
_mbsstr
sprintf_s
calloc
free
malloc
_recalloc
_resetstkoflw
__CxxFrameHandler3
memcpy
memmove
_mbsrchr
_CxxThrowException
fclose
fflush
fopen
fputs
_snprintf
_vsnprintf
_splitpath
strftime
_localtime64
_time64
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__clean_type_info_names_internal
memcpy_s
memcmp
_purecall
memmove_s
wcsncpy_s
RaiseException
GetCurrentProcess
FlushInstructionCache
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
DecodePointer
EncodePointer
GetModuleHandleW
FindResourceA
IsDBCSLeadByte
GetCurrentThreadId
WideCharToMultiByte
CreateDirectoryA
GetFileAttributesA
LocalAlloc
LocalFree
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLastError
SetLastError
EnterCriticalSection
GetModuleHandleA
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadResource
SizeofResource
MulDiv
lstrcmpiA
HeapAlloc
HeapFree
GetProcessHeap
InterlockedCompareExchange
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
VirtualAlloc
VirtualFree
lstrlenW
lstrlenA
LoadLibraryExA
MultiByteToWideChar
GetModuleFileNameA
SetWindowLongA
RegisterClipboardFormatA
DdeFreeStringHandle
DdeQueryStringA
DdeCreateStringHandleA
DdeGetData
DdeGetLastError
DdeFreeDataHandle
DdeClientTransaction
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeA
LoadCursorA
DefWindowProcA
CallWindowProcA
RegisterClassExA
GetClassInfoExA
CreateWindowExA
IsWindow
IsChild
DestroyWindow
ShowWindow
SetWindowPos
CharNextA
CharNextW
SetFocus
GetFocus
GetKeyState
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
InvalidateRect
GetClientRect
IntersectRect
UnionRect
OffsetRect
EqualRect
PtInRect
GetWindowLongA
UnregisterClassA
GetParent
SetWindowOrgEx
SetViewportOrgEx
LPtoDP
TextOutA
SetTextAlign
SetMapMode
SaveDC
RestoreDC
Rectangle
DeleteDC
CreateRectRgnIndirect
CreateDCA
GetDeviceCaps
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
OleRegEnumVerbs
OleRegGetMiscStatus
CreateOleAdviseHolder
OleSaveToStream
WriteClassStm
ReadClassStm
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
OleRegGetUserType
VariantCopy
OleCreatePropertyFrame
UnRegisterTypeLi
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
GetErrorInfo
SetErrorInfo
SysAllocString
CreateErrorInfo
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Winerror_map@std@@YAPBDH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0id@locale@std@@QAE@I@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ