DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8fb9593fb06aa0e345e61ea7204512e4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fb9593fb06aa0e345e61ea7204512e4.dll
Resource
win10v2004-20231222-en
Target
8fb9593fb06aa0e345e61ea7204512e4
Size
36KB
MD5
8fb9593fb06aa0e345e61ea7204512e4
SHA1
fdfa2c757dcf124acd5e8c36da95f2368b3dcb31
SHA256
4f65c54c3303949a9f3dcd6a48c724265b1594ba0db2cdfba139e7dfdde05420
SHA512
af7ec64cb5bf5176aca16847cab886d8a02ef8a57d8b705eae5b0df832d8c8ca1692c54b9b9fb95d6fe4048184b16937bc9993103ba6a6e8d35d90766c16a00c
SSDEEP
768:7wv2A4cic/GsujK9N5Xv2WrPrHuNEeunu1LMX911uAkERoZ:c8wGsGK9zHDuKeuIAX910nERoZ
Checks for missing Authenticode signature.
resource |
---|
8fb9593fb06aa0e345e61ea7204512e4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetLastError
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
CloseHandle
ReadFile
GetModuleFileNameA
CreateFileA
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
LocalAlloc
InterlockedExchange
GetVersionExA
RaiseException
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetFileSize
CharNextA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
SysStringLen
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
_except_handler3
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
wcslen
wcschr
swprintf
_wsplitpath
_wmakepath
wcscat
free
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ