DllCanUnloadNow
DllGetClassObject
DllRegisterServer
ERKMVregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
86d554405e94b0ce5973d8f605b2253b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86d554405e94b0ce5973d8f605b2253b.dll
Resource
win10v2004-20231222-en
Target
86d554405e94b0ce5973d8f605b2253b
Size
588KB
MD5
86d554405e94b0ce5973d8f605b2253b
SHA1
76c70afca790c5f275df8151fd502031c8cb7eb8
SHA256
36c06615fad9a76af18a314c6d5f81112283b6788f335cb4f8acd225882dcd99
SHA512
cf05856958a5788cd5b9a894d7ab4dd6d1b614660a14b6d0e8136bcc460b1691a05d4450a735d07bbf33896511f170fe82e77327b410b2c18a9889b2f68a0696
SSDEEP
1536:uGc/5PpTowbqwI81hDTlBSaDf3dlK+hiKbZXwlBk6u6oVlSuAsyHlm:OhPmanP1hrSaDf3DZXOpu6oVljyHlm
Checks for missing Authenticode signature.
resource |
---|
86d554405e94b0ce5973d8f605b2253b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleW
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
GetShortPathNameW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
WideCharToMultiByte
CompareStringW
CompareStringA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
lstrcmpiW
DisableThreadLibraryCalls
GetLocaleInfoW
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
UnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
WriteFile
SetEnvironmentVariableA
GetEnvironmentStringsW
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
ExitProcess
FatalAppExitA
Sleep
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
CharNextW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
VariantCopy
VariantChangeType
VariantClear
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
ERKMVregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ