DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
486dfa824b4dd08da2b9580c3c8248730c4dc5ba83c579a386983705c140bad0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
486dfa824b4dd08da2b9580c3c8248730c4dc5ba83c579a386983705c140bad0.dll
Resource
win10v2004-20240226-en
Target
486dfa824b4dd08da2b9580c3c8248730c4dc5ba83c579a386983705c140bad0
Size
192KB
MD5
c50d4bf9a83cba8742c741a6a6747122
SHA1
0ab0c8df5c0c0f5f3e980b10d05d8048d760dab5
SHA256
486dfa824b4dd08da2b9580c3c8248730c4dc5ba83c579a386983705c140bad0
SHA512
3bb12b7f54a6a752019ed1606a7d99132250bd4089866d73d573e840a52867ef0f5a7cb0a1b33324605d27d6fe96da47c4043b624c0da5f20207d3bd9f33f7fb
SSDEEP
1536:nIsD0I8KEqZVn5skftGZ2fva3CM9ySjBhKfFB5R14063hpOU2MEH+dKY0UIuF+lL:nj8KZSMyOaS6jBS55cl2/POWlZt
Checks for missing Authenticode signature.
resource |
---|
486dfa824b4dd08da2b9580c3c8248730c4dc5ba83c579a386983705c140bad0 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CreateEventW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
LoadLibraryW
LoadResource
MultiByteToWideChar
ResetEvent
SetEvent
SizeofResource
WaitForMultipleObjects
WaitForSingleObject
lstrcmpW
_vsnprintf
CLSIDFromString
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
SysAllocString
SysAllocStringLen
VariantInit
VariantClear
LoadRegTypeLib
__acrt_iob_func
__stdio_common_vsprintf
_assert
_strdup
_wcsdup
calloc
free
fwrite
getenv
isprint
memcmp
memcpy
memmove
strchr
strcmp
strcspn
strlen
wcscpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ