CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
Static task
static1
Behavioral task
behavioral1
Sample
4174000b65b3697b37a7cb0ca3f87b2723caa44c5f2324dff06b744602a17d4b.dll
Resource
win7-20231215-en
Target
4174000b65b3697b37a7cb0ca3f87b2723caa44c5f2324dff06b744602a17d4b
Size
1.6MB
MD5
e361a255bcdc758c8fb29a69b1ee5105
SHA1
90c9642b28338fc545feaf521061782bde9d592d
SHA256
4174000b65b3697b37a7cb0ca3f87b2723caa44c5f2324dff06b744602a17d4b
SHA512
ad32d9e40bff2baf025dfa4c9abdebccfabda0a412afac99b05b75985392e794918a675c291b142a331ee74cda2f1a5f449e98a5c8ae538703533679586b7275
SSDEEP
49152:0Cc2ZZdDSdfTzkrFQbsKcrdr0X0RXWclALDScwZMHHm:DFJ0kRXWD
Checks for missing Authenticode signature.
Processes:
resource |
---|
4174000b65b3697b37a7cb0ca3f87b2723caa44c5f2324dff06b744602a17d4b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
GetModuleHandleExA
FreeLibrary
GetModuleFileNameA
GetSystemTimeAsFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetProcAddress
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
SetEndOfFile
CreateFileW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InitializeCriticalSectionEx
Sleep
GetLocaleInfoEx
GetStringTypeW
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
ExitProcess
AreFileApisANSI
HeapSize
WriteFile
GetProcessHeap
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
IsValidCodePage
GetACP
GetOEMCP
SetLastError
InitOnceExecuteOnce
GetStartupInfoW
ReadFile
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CloseHandle
QueryPerformanceCounter
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
SetFilePointer
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
ReadConsoleW
SetStdHandle
inet_addr
CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ