DllGetContractDescription
I_RpcExtInitializeExtensionPoint
Static task
static1
Behavioral task
behavioral1
Sample
97373d59533f52c5b7469e9e19ec06b9dcf4b3a7f32b2fdd6561116e8eb78fdb.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
97373d59533f52c5b7469e9e19ec06b9dcf4b3a7f32b2fdd6561116e8eb78fdb.dll
Resource
win10v2004-20240226-en
Target
97373d59533f52c5b7469e9e19ec06b9dcf4b3a7f32b2fdd6561116e8eb78fdb
Size
48KB
MD5
62cba11d0e1d8058fd064bbadfc253e3
SHA1
ae6b00c972d7deddf037ea4e847005abb7d2f999
SHA256
97373d59533f52c5b7469e9e19ec06b9dcf4b3a7f32b2fdd6561116e8eb78fdb
SHA512
5d14f425f7a33f8f48cf80af9e13ac9bd91889bf20c57464217d4df20660ba8bf4e6bb472d3230e82544ec6bf441d89f96a020b5b390ebce44ac58578612b0bf
SSDEEP
384:lObq7NkqWQpIdMg1poOMcL63grMXT8ZYdyJ+0758fyN5ZuXNDDnFz4os55nCCVJ:lO6+uUsgwXTm2b0N8qN5ZE94oOV
Checks for missing Authenticode signature.
resource |
---|
97373d59533f52c5b7469e9e19ec06b9dcf4b3a7f32b2fdd6561116e8eb78fdb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
lstrcatA
GetSystemDirectoryA
FreeLibrary
ExitProcess
GetProcAddress
DisableThreadLibraryCalls
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA
OutputDebugStringA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
IsBadReadPtr
HeapFree
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
HeapReAlloc
GetCommandLineA
GetVersion
TlsAlloc
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
wsprintfA
DllGetContractDescription
I_RpcExtInitializeExtensionPoint
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ