DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
2218b0c93faaa7f9062c63a47b47a9824dc80b2690ec02701ccc955a43e7af02.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2218b0c93faaa7f9062c63a47b47a9824dc80b2690ec02701ccc955a43e7af02.dll
Resource
win10v2004-20240226-en
Target
2218b0c93faaa7f9062c63a47b47a9824dc80b2690ec02701ccc955a43e7af02
Size
320KB
MD5
0d0ab0b01ff2e21fc3c6335e57882fa9
SHA1
92b13efc00534ef0a6ce11f8deb22134bcc11eb2
SHA256
2218b0c93faaa7f9062c63a47b47a9824dc80b2690ec02701ccc955a43e7af02
SHA512
2ed6bb993b2ff40921c0b14c0d1acfc7a13ea0c0edd59850a1357e268b908c9c9d2c423c4313304235a0f9b18041e3cd79932fc6d66482c8a4b8b21e05e7044c
SSDEEP
6144:GanFe3kx95qC7RzSD5T/y9a6jEQR5kwgQ5n71umxwVuoxR+ldL:G33q4C7oD5K9rEmfg3+l
Checks for missing Authenticode signature.
resource |
---|
2218b0c93faaa7f9062c63a47b47a9824dc80b2690ec02701ccc955a43e7af02 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
ConnectNamedPipe
CreateFileA
CreateNamedPipeA
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery
WriteFile
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
sprintf
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ