DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f56beb787705266075b159fc4190cd038c4e1b4e94fce5b366f0799f4cca16cd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f56beb787705266075b159fc4190cd038c4e1b4e94fce5b366f0799f4cca16cd.dll
Resource
win10v2004-20231222-en
Target
f56beb787705266075b159fc4190cd038c4e1b4e94fce5b366f0799f4cca16cd
Size
1.3MB
MD5
0336dd1d2dbf76c98488a8b07a9553f4
SHA1
73ba75fae3cbce0e95c1782a8be251af7225633c
SHA256
f56beb787705266075b159fc4190cd038c4e1b4e94fce5b366f0799f4cca16cd
SHA512
d59b450c17f03a8a8eef3084adaeb3eeb93486c30dc764fc3cddccdc0e8b0b5e6dce71353338b0393e4f0f1d01c3d09721ef1647ec1548a249e0f3a45412d323
SSDEEP
24576:c0Yeok7OlotqDaB3r8o1y01B8Hkw6Cn47ypB+KVgiQ:c0YHk7Olotr3B1yKBykwG
Checks for missing Authenticode signature.
resource |
---|
f56beb787705266075b159fc4190cd038c4e1b4e94fce5b366f0799f4cca16cd |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord582
__vbaVarSub
__vbaVarTstGt
ord583
__vbaStrI2
__vbaNextEachAry
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
ord693
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
ord588
ord695
__vbaLineInputStr
__vbaLenBstr
__vbaAptOffset
__vbaStrVarMove
ord696
ord697
__vbaVarIdiv
__vbaPut3
__vbaFreeVarList
__vbaVargObjAddref
_adj_fdiv_m64
ord698
__vbaVarIndexStore
ord621
__vbaNextEachVar
__vbaFreeObjList
ord516
__vbaVarIndexLoadRef
__vbaStrErrVarCopy
_adj_fprem1
__vbaRecAnsiToUni
ord518
__vbaVarSetVarAddref
ord519
__vbaI2Abs
__vbaForEachCollAd
ord629
__vbaStrCat
__vbaVarCmpNe
ord552
__vbaInStrVarB
ord553
__vbaLsetFixstr
__vbaBoolErrVar
__vbaSetSystemError
__vbaRecDestruct
__vbaLenBstrB
ord662
__vbaHresultCheckObj
ord557
__vbaLenVar
ord558
_adj_fdiv_m32
ord666
__vbaVarTstLe
__vbaAryVar
__vbaVarXor
__vbaVarCmpGe
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaVarForInit
__vbaExitProc
ord593
ord594
ord595
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaVarIndexStoreObj
ord702
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaStrFixstr
__vbaBoolVar
ord520
__vbaFpR8
__vbaVarTstLt
__vbaRefVarAry
__vbaVargVar
__vbaBoolVarNull
_CIsin
__vbaErase
ord631
ord709
__vbaVargVarMove
ord525
__vbaVarZero
__vbaVarCmpGt
ord632
__vbaChkstk
__vbaFileClose
__vbaI2Cy
ord526
EVENT_SINK_AddRef
ord528
__vbaGenerateBoundsError
__vbaCyI2
__vbaStrCmp
__vbaPutOwner3
__vbaAryConstruct2
__vbaVarTstEq
__vbaR4Str
__vbaCyI4
__vbaPutOwner4
ord560
__vbaVarLikeVar
ord561
__vbaI2I4
__vbaObjVar
DllFunctionCall
ord563
__vbaVarLateMemSt
__vbaVarOr
__vbaCySub
__vbaCastObjVar
__vbaRedimPreserve
__vbaLbound
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaR8Cy
__vbaRedim
__vbaStrR8
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
ord600
__vbaUI1I2
_CIsqrt
__vbaRedimVar
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaUI1I4
__vbaFpCmpCy
__vbaVarMul
ord710
__vbaExceptHandler
ord711
__vbaStrToUnicode
ord712
ord606
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
__vbaR8ErrVar
ord607
__vbaI2Str
ord714
__vbaVarDiv
ord608
__vbaVarCmpLe
ord716
__vbaFPException
ord717
__vbaInStrVar
__vbaGetOwner3
__vbaUbound
__vbaStrVarVal
__vbaVarCat
ord535
__vbaDateVar
__vbaI2Var
ord644
ord537
ord645
_CIlog
__vbaErrorOverflow
ord647
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
ord570
ord648
__vbaVarLateMemCallLdRf
__vbaR8Str
__vbaInStr
__vbaVarInt
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaVarSetObj
__vbaStrCopy
__vbaI4Str
ord681
__vbaVarCmpLt
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
__vbaPowerR8
_adj_fdiv_r
ord578
ord685
__vbaVarTstNe
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
__vbaForEachAry
__vbaVarCmpEq
ord104
__vbaFpCy
ord610
ord105
__vbaAryLock
__vbaVarAdd
__vbaLateMemCall
__vbaStrToAnsi
ord612
__vbaVarDup
ord613
__vbaFpI2
__vbaVarMod
__vbaVarTstGe
ord616
__vbaVarCopy
__vbaFpI4
__vbaVarLateMemCallLd
__vbaLateMemCallLd
__vbaRecDestructAnsi
__vbaVarSetObjAddref
__vbaR8IntI2
ord617
_CIatan
__vbaI2ErrVar
__vbaAryCopy
__vbaCastObj
__vbaStrMove
__vbaR8IntI4
__vbaI4Cy
__vbaForEachVar
__vbaStrVarCopy
ord619
ord542
ord543
_allmul
__vbaLenVarB
ord544
ord545
_CItan
__vbaNextEachCollAd
ord546
ord547
__vbaFPInt
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaStrCy
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ