CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
Static task
static1
Behavioral task
behavioral1
Sample
cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1.dll
Resource
win7-20231129-en
Target
cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1
Size
724KB
MD5
39cf448c556a2cd2aa1cb6e6220857e9
SHA1
bd5001edefca0bcef3ec3cec39c999cdf25d2ff8
SHA256
cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1
SHA512
4ff1e1fb3f31abfc41583c92f7db3fc19a71383bed39be3b7c6f9cabab40d575ebaf575bca18d343862ff33e445c2122823bea489b8f90b3ee88a1e81069b1d3
SSDEEP
12288:qlsyXE2GemaPufRhta1ioZ4/H3KsUbTNwHP:qlsyXE2G3aUwZLbTuH
Checks for missing Authenticode signature.
Processes:
resource |
---|
cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
FreeLibrary
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CreateFileW
CloseHandle
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
GetStringTypeW
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
GetCommandLineA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
WriteFile
ExitProcess
HeapSize
IsDebuggerPresent
SetLastError
GetProcessHeap
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
IsValidCodePage
GetACP
GetOEMCP
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
LCMapStringEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
inet_addr
CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ