CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
Static task
static1
Behavioral task
behavioral1
Sample
f551fb19367ccf32e5f054d30e10274585863ea0460075e0bc048f5c086e1d12.dll
Resource
win7-20231215-en
Target
f551fb19367ccf32e5f054d30e10274585863ea0460075e0bc048f5c086e1d12
Size
691KB
MD5
c8f5a249eb9af0f83c34eb1a3dc8e477
SHA1
3c51c975ee3db4f64f643ff70f2d72650a8414c8
SHA256
f551fb19367ccf32e5f054d30e10274585863ea0460075e0bc048f5c086e1d12
SHA512
f98422f0f7419bd44af2d75520fa281f87bef62ea8c809e3f11968230e7fd9486849de997ad81f9d740a9cf69fed79c4d9591c977fefdc586589590d9d622b61
SSDEEP
12288:o1C1YgDBIuKofa3MlF8oQtqhGsZNEgp016UbTNwHP:o1C1YgDBIuK13vrsZAbTuH
Checks for missing Authenticode signature.
Processes:
resource |
---|
f551fb19367ccf32e5f054d30e10274585863ea0460075e0bc048f5c086e1d12 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
FreeLibrary
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CreateFileW
CloseHandle
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
GetStringTypeW
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
GetCommandLineA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
WriteFile
ExitProcess
HeapSize
IsDebuggerPresent
SetLastError
GetProcessHeap
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
IsValidCodePage
GetACP
GetOEMCP
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
LCMapStringEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
inet_addr
CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ