CreateABHList
CreatePGHDict
DisableDLV
DisableOFR
DisableSHR
EnableDLV
EnableOFR
EnableSHR
FreeABHData
GetSML
GetWPF
ReadVBInfo
RestoreSMLData
WriteVBInfo
Static task
static1
Behavioral task
behavioral1
Sample
c9e00c9d94d1a790d5923b050b0bd741.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9e00c9d94d1a790d5923b050b0bd741.dll
Resource
win10v2004-20240226-en
Target
c9e00c9d94d1a790d5923b050b0bd741
Size
808KB
MD5
c9e00c9d94d1a790d5923b050b0bd741
SHA1
7105b17d07fd5b30d5386862a3b9cc1ff53a2398
SHA256
7d5ad688d1cdb34f8ee694e60b9d47e894c879f23218c5c29a19a514030e706d
SHA512
4a8fe1e97f6f98ee0648d85731aa8ca7ee7f3cc8bad4848b7d5d4e4f6374a8599a238f17fc8e623f6c8785f40caf0fe5190ea8773523587be85f7e0de18b6818
SSDEEP
12288:CzOQeyh78IrXbXHQr/fBdYinxl9DuHTUPp/1J:iOQe47BLniJDuHTUR9J
Checks for missing Authenticode signature.
resource |
---|
c9e00c9d94d1a790d5923b050b0bd741 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
TerminateThread
SuspendThread
ResumeThread
OpenThread
GetExitCodeThread
InterlockedIncrement
GetCurrentThreadId
SetErrorMode
SetFilePointer
FindClose
CloseHandle
SetEndOfFile
FileTimeToLocalFileTime
GetFileInformationByHandle
SetFileAttributesW
GetFileTime
LocalFileTimeToFileTime
SetFileTime
WriteFile
ReadFile
GetFullPathNameW
CreateFileW
FlushFileBuffers
GetFileSize
GetLastError
FindFirstFileW
SetEnvironmentVariableW
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
SetEvent
ResetEvent
CreateEventW
OpenEventW
LocalFree
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetVersionExA
SetLastError
OpenMutexW
CreateMutexA
CreateMutexW
ReleaseMutex
ExitThread
GetVersion
ProcessIdToSessionId
CreateFileMappingW
lstrcatW
lstrcpynA
HeapAlloc
HeapFree
GetProcessHeap
IsBadReadPtr
GetSystemDirectoryW
lstrcpynW
GetModuleFileNameW
SystemTimeToFileTime
GetSystemTime
SetThreadContext
QueueUserAPC
GetThreadContext
RemoveDirectoryW
GetExitCodeProcess
MoveFileExW
GetShortPathNameW
GetFileAttributesW
LoadLibraryW
GetVolumeInformationW
TerminateProcess
DeleteFileW
CreateProcessW
CopyFileW
GetLongPathNameW
OpenProcess
VirtualAllocEx
SearchPathW
lstrlenA
IsBadStringPtrA
lstrcmpiA
GetModuleHandleA
GetWindowsDirectoryW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
VirtualFreeEx
ReadProcessMemory
VirtualProtectEx
VirtualQueryEx
UnmapViewOfFile
FreeLibrary
DuplicateHandle
WaitForMultipleObjectsEx
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
MapViewOfFile
OpenFileMappingW
FindNextFileW
Thread32First
Thread32Next
CreateToolhelp32Snapshot
CreateEventA
WaitForMultipleObjects
lstrlenW
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
GetCommandLineA
CreateThread
RtlUnwind
GetCurrentThread
HeapSize
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsDebuggerPresent
LCMapStringA
LCMapStringW
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetConsoleCtrlHandler
InitializeCriticalSection
GetLocaleInfoA
GetLocaleInfoW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateABHList
CreatePGHDict
DisableDLV
DisableOFR
DisableSHR
EnableDLV
EnableOFR
EnableSHR
FreeABHData
GetSML
GetWPF
ReadVBInfo
RestoreSMLData
WriteVBInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ