DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a0a16069f6b55d0d947a0325848d3f48.dll
Resource
win7-20240221-en
Target
a0a16069f6b55d0d947a0325848d3f48
Size
216KB
MD5
a0a16069f6b55d0d947a0325848d3f48
SHA1
1cc1babe1170f03dbed0dd5e7976160d6c9aa6f8
SHA256
0a546d10cfd6e7133857f15ff3352db30156444eb03f869079b7e83c5a6a0a7c
SHA512
9fa255e79f101ade7b65e305393a54857d438bcbc2290da2ff62cc6e0f42335d37338b2fc0177e47b01d58281783eda528c9f977aac5351e0718473a288e9e0a
SSDEEP
3072:E66EkdB0lC7BX5/bbfImEB0TFfjEBGtaj6e8rTimxQYP359s/tpMFD0+:L6AlqbrIm7R28/i/YPJ9s7MB
Checks for missing Authenticode signature.
resource |
---|
a0a16069f6b55d0d947a0325848d3f48 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
DisableThreadLibraryCalls
GetModuleFileNameW
RaiseException
GetLastError
EnterCriticalSection
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
Sleep
CreateThread
LocalAlloc
lstrlenW
FormatMessageW
InitializeCriticalSection
LocalFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
CreateFileW
GetConsoleMode
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetFilePointer
ReadFile
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetConsoleCP
UnregisterClassA
CharNextW
MessageBoxW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
CoTaskMemRealloc
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
LoadTypeLi
LoadRegTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ