DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JDQuoteFini
JDQuoteGetLockCount
JDQuoteInit
JDQuoteInitData
JDQuoteProcessCmdLine
JDQuoteRegisterClassFactory
JDQuoteSetEnable
JDQuoteSetSymbolCount
Static task
static1
Behavioral task
behavioral1
Sample
5d7948a4662e94ae1a5371eb8cdfe6fe8208a84119f4ebf08d032fa1fed2320b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5d7948a4662e94ae1a5371eb8cdfe6fe8208a84119f4ebf08d032fa1fed2320b.dll
Resource
win10v2004-20231222-en
Target
5d7948a4662e94ae1a5371eb8cdfe6fe8208a84119f4ebf08d032fa1fed2320b
Size
80KB
MD5
29763013dd323f2a4f622a332f3376bc
SHA1
2449206b1f5bf8d1e34eae89526791d7111febe1
SHA256
5d7948a4662e94ae1a5371eb8cdfe6fe8208a84119f4ebf08d032fa1fed2320b
SHA512
2313c62a036197003b024edf8cc630eb23aa291ef6553d9788a2644ec972e5e7b43d65390ef6145a0e7d26c653b156449b649aa7dc1084faba2d7d0b5e33e69f
SSDEEP
1536:qqFxUfTothx5MRRLC/hSqWkXzeuFWg9MJMWZA9cKEsN1:LFxUbotjERsSqWMzJWgiJVZA9chsv
Checks for missing Authenticode signature.
resource |
---|
5d7948a4662e94ae1a5371eb8cdfe6fe8208a84119f4ebf08d032fa1fed2320b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JDGetSymbolHistDataBefore2
JDAddQuote
JDUpdateQuote
JDRemoveQuote
JDSGetApplication
ord5594
ord5310
ord2106
ord535
ord4189
ord3663
ord2432
ord1601
ord455
ord453
ord1206
ord1223
ord1202
ord1131
ord6467
ord1218
ord3584
ord772
ord812
ord700
ord500
ord559
ord398
ord543
ord803
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord1238
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord815
ord561
ord801
ord541
ord802
ord542
ord6569
ord2820
ord3811
ord1567
ord1979
ord6385
ord5622
ord665
ord5186
ord354
ord268
ord5860
ord5606
ord6142
ord1265
ord715
ord348
ord415
ord663
ord1081
ord5620
ord5605
ord996
ord3976
ord1105
ord5861
ord6143
ord940
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2458
ord4188
ord861
ord5631
ord924
ord939
ord5632
ord4129
ord539
ord4204
ord397
ord521
ord912
ord913
ord6307
ord858
ord699
ord823
ord825
ord3438
ord5593
ord6144
ord540
ord2818
ord860
ord5933
ord3880
ord3425
ord832
ord3054
ord800
ord537
ord3401
ord1116
_adjust_fdiv
_initterm
strlen
__CxxFrameHandler
_EH_prolog
memset
free
malloc
_purecall
memcmp
memcpy
realloc
_vsnprintf
time
strchr
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
ResetEvent
ResumeThread
SetEvent
CreateDirectoryA
WideCharToMultiByte
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
TerminateThread
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
GetModuleFileNameA
GetShortPathNameA
lstrlenW
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
LocalFree
LocalAlloc
GetExitCodeThread
WaitForSingleObject
HeapDestroy
WaitForMultipleObjects
CharNextA
CoCreateInstance
CoRegisterClassObject
CreateStreamOnHGlobal
CoInitialize
CoResumeClassObjects
CoUnmarshalInterface
CoCreateFreeThreadedMarshaler
CLSIDFromString
CoMarshalInterface
CoUninitialize
SysAllocString
VariantCopy
RegisterTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
SafeArrayCreate
SafeArrayPutElement
VariantInit
VariantClear
LoadTypeLi
??0CDALog@@QAE@XZ
??1CDALog@@QAE@XZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JDQuoteFini
JDQuoteGetLockCount
JDQuoteInit
JDQuoteInitData
JDQuoteProcessCmdLine
JDQuoteRegisterClassFactory
JDQuoteSetEnable
JDQuoteSetSymbolCount
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ