InitProcessPriv
InitThread
ShutdownLockAppHostServer
StartLockAppHostServer
UnInitProcessPriv
UnInitThread
Static task
static1
Behavioral task
behavioral1
Sample
DUI70.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DUI70.dll
Resource
win10v2004-20240226-en
Target
DUI70.dll.exe
Size
320KB
MD5
caa16eb9c17c381a6d80c821fb0daf0a
SHA1
7ae6a4dccfad29879bb904cf72ea055ed3521630
SHA256
5289529957d52c9d5fc2e47aa9924fd1de21b902509dee0241d5d6b056733a94
SHA512
30ca2061acdce01bebd3501bc82e0edb0fd20d45cda97fcb9c12c74de3cd2bce47f98d4e14b409f42b797bbf8bc46968b3073c007756e444234493ea2d9473ba
SSDEEP
6144:/aAVa1ONI/wbUxBDEzauQvZUMLkGITiJKPc/1ple3CSpc+wdb:/an1ONI/6UxBDEzxQHccpe3C+0
Checks for missing Authenticode signature.
resource |
---|
DUI70.dll.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
WriteFile
ReadFile
CreateFileW
CloseHandle
LocalFree
DosDateTimeToFileTime
SetFilePointer
SystemTimeToFileTime
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetCurrentDirectoryW
GetFileType
DuplicateHandle
FileTimeToDosDateTime
FindFirstFileW
MapViewOfFile
UnmapViewOfFile
FileTimeToSystemTime
GetLastError
FindClose
GetLocalTime
CreateFileMappingW
GetFileSize
GetFileInformationByHandle
GetSystemTime
PeekNamedPipe
SetErrorMode
CreateProcessW
HeapAlloc
UpdateProcThreadAttribute
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
OpenProcess
Sleep
TerminateProcess
GetTempPathW
CreatePipe
InitializeProcThreadAttributeList
DeleteFileW
GetCurrentProcessId
GetCommandLineW
OutputDebugStringW
GetModuleFileNameW
FreeLibraryAndExitThread
CreateThread
GetProcAddress
IsBadReadPtr
GetModuleHandleA
LoadLibraryA
FindNextFileW
LocalAlloc
InitializeCriticalSection
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
HeapReAlloc
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
RtlUnwindEx
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetStringTypeW
HeapSize
GetModuleHandleW
ExitProcess
RaiseException
RtlPcToFileHeader
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeZoneInformation
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
SetStdHandle
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
LookupPrivilegeValueW
RegCloseKey
CommandLineToArgvW
CoInitializeEx
CoInitializeSecurity
InitProcessPriv
InitThread
ShutdownLockAppHostServer
StartLockAppHostServer
UnInitProcessPriv
UnInitThread
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ