CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
Static task
static1
Behavioral task
behavioral1
Sample
875adbc2ccd27c7dbd8c48f21c178772b2e61936727c471cf5facc8c40359105.dll
Resource
win7-20231129-en
Target
875adbc2ccd27c7dbd8c48f21c178772b2e61936727c471cf5facc8c40359105
Size
983KB
MD5
01bf7ccc534bff0b6d42637a12d32b1e
SHA1
a563456f2b19ff7760f12d461db93f8bb96e6b00
SHA256
875adbc2ccd27c7dbd8c48f21c178772b2e61936727c471cf5facc8c40359105
SHA512
86bfaa5e6637045d6d618740e2055e5a07c6e14802e8382c360d47db3d7d6d5f93a2a4c9c345752e69d81e984363f87504ae58fd0f342eaed6439344289f26c2
SSDEEP
24576:H4oAM4/ZUMeOnoOWtgaiBSC3aVvZVbTuH2Q:nBMNP8gs/vZMH2Q
Checks for missing Authenticode signature.
Processes:
resource |
---|
875adbc2ccd27c7dbd8c48f21c178772b2e61936727c471cf5facc8c40359105 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
FreeLibrary
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
SetEndOfFile
CreateFileW
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
GetLocaleInfoEx
GetStringTypeW
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
GetCommandLineA
GetCurrentThreadId
ExitProcess
AreFileApisANSI
ReadFile
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
WriteFile
HeapSize
SetLastError
GetProcessHeap
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
IsValidCodePage
GetACP
GetOEMCP
CloseHandle
GetConsoleMode
ReadConsoleW
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
SetFilePointer
SetFilePointerEx
GetConsoleCP
FlushFileBuffers
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
SetStdHandle
inet_addr
CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ