DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
6c65d1c6cf938c5e73511c8aa160f1b5e9d53f4ab2657076e99e8038aaf4b7f4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6c65d1c6cf938c5e73511c8aa160f1b5e9d53f4ab2657076e99e8038aaf4b7f4.dll
Resource
win10v2004-20231215-en
Target
6c65d1c6cf938c5e73511c8aa160f1b5e9d53f4ab2657076e99e8038aaf4b7f4
Size
132KB
MD5
6c65313c438aa70af737504696984363
SHA1
235301ee5246a153190e398b3e3cae480a358e9e
SHA256
6c65d1c6cf938c5e73511c8aa160f1b5e9d53f4ab2657076e99e8038aaf4b7f4
SHA512
44f7fc9ee0ba86ca1deb587a3f36dc5cfa41433b40ffdff0deead7d7dca8fc113321dada946f66b1f7de29314b60c1ab60f0904192b1f8b9b0f699424801303d
SSDEEP
3072:0sVIp8ZjwjO9cMX9BqJ5BMY2Wwu0oOb0mBni:Xr9UaRWw4OPBn
Checks for missing Authenticode signature.
resource |
---|
6c65d1c6cf938c5e73511c8aa160f1b5e9d53f4ab2657076e99e8038aaf4b7f4 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GlobalUnlock
CloseHandle
MultiByteToWideChar
GetLastError
FindFirstFileW
GetPrivateProfileIntW
WritePrivateProfileStringW
DeleteFileW
FindNextFileW
FindClose
HeapAlloc
HeapReAlloc
HeapFree
FlsSetValue
GetCommandLineA
GetVersionExW
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
ExitProcess
EncodePointer
DecodePointer
FlsFree
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwindEx
GlobalLock
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSectionAndSpinCount
Sleep
SetFilePointer
CreateFileA
WriteConsoleW
SetStdHandle
FlushFileBuffers
LCMapStringW
GetStringTypeW
LoadLibraryExW
SetEndOfFile
GetProcessHeap
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
GlobalAlloc
GetFileSize
GetLocalTime
CreateFileW
GetModuleFileNameW
SetLastError
DebugBreak
TerminateProcess
OutputDebugStringA
GetParent
IsWindowEnabled
EnableWindow
DialogBoxParamW
SetWindowTextA
PostMessageW
MessageBoxW
GetClientRect
SendMessageW
BeginPaint
EndPaint
GetWindowTextA
LoadStringW
GetWindowTextW
DefWindowProcW
GetDlgItem
SetWindowTextW
SendDlgItemMessageW
EndDialog
DeleteFormW
EnumFormsW
GetPrinterDriverW
GetPrinterW
AddFormW
OpenPrinterW
GetPrinterDataW
SetPrinterDataW
ClosePrinter
CreateStreamOnHGlobal
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
SHBrowseForFolderW
SHGetPathFromIDListW
TextOutW
SelectObject
GdiplusShutdown
GdipFree
GdipAlloc
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRect
GdipLoadImageFromStream
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ