DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunDllEntryPointW
Static task
static1
Behavioral task
behavioral1
Sample
bf9c3218f5929dfeccbbdc0ef421282921d6cbc06f270209b9868fc73a080b8c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bf9c3218f5929dfeccbbdc0ef421282921d6cbc06f270209b9868fc73a080b8c.dll
Resource
win10v2004-20231215-en
Target
bf9c3218f5929dfeccbbdc0ef421282921d6cbc06f270209b9868fc73a080b8c.dll
Size
1.7MB
MD5
409e7028f820e6854e7197cbb2c45d06
SHA1
d41c5a3c7a96e7a542a71b8cc537b4a5b7b0cae7
SHA256
bf9c3218f5929dfeccbbdc0ef421282921d6cbc06f270209b9868fc73a080b8c
SHA512
e3c7b4cb937c0ee13005fabd4a17ee2e1161e2392c1926e502532b8435074de0b895b00cefa7f439cd74d1e4aa2ed87f2b6b101d80170d279649f401c31fdce7
SSDEEP
12288:o+lMBEm6dW6Ga/QthaysqG8/PCGJHXaMu7Vsw4EhV2O7nUkZ11:o+lJm6rG46s+/3EVt
Checks for missing Authenticode signature.
resource |
---|
bf9c3218f5929dfeccbbdc0ef421282921d6cbc06f270209b9868fc73a080b8c.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoInitialize
CoUninitialize
VirtualProtect
RtlMoveMemory
HeapFree
GetProcessHeap
TlsSetValue
TlsFree
TlsGetValue
HeapAlloc
TlsAlloc
_CIcos
_adj_fptan
VBDllGetClassObject
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
VBDllCanUnloadNow
__vbaPut4
_adj_fprem1
__vbaResume
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVar
_CIsin
ord631
ord525
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGet3
__vbaVarTstEq
UserDllMain
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
_adj_fprem
_adj_fdivr_m64
GetMem1
GetMem2
ord716
__vbaFPException
GetMem4
__vbaVarCat
GetMem8
ord644
ord537
_CIlog
__vbaFileOpen
__vbaNew2
ord648
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord101
__vbaVarSetVar
ord102
ord103
ord104
ord610
ord105
__vbaVarAdd
__vbaAryLock
__vbaFpI4
__vbaVarLateMemCallLd
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunDllEntryPointW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ