DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fc059489f2961851b27e7b604984b5d5b785a4edb41d6f45887d24d084ff70e9.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc059489f2961851b27e7b604984b5d5b785a4edb41d6f45887d24d084ff70e9.dll
Resource
win10v2004-20240412-en
Target
fc059489f2961851b27e7b604984b5d5b785a4edb41d6f45887d24d084ff70e9
Size
3.2MB
MD5
3601a93a22f4ff8b5a91e243f3a79d04
SHA1
83521798b26339c3346a8afebcbbc0a4348631ef
SHA256
fc059489f2961851b27e7b604984b5d5b785a4edb41d6f45887d24d084ff70e9
SHA512
8743a431f4157bb625a36d05dbce4f516c0a2e5a2e74d3f020f10dfb8285c0866b3ba08279a9fdd12060a24b4a8f89ca9e5974ab2adb54d99f51398d551b9c29
SSDEEP
98304:Zy3em3FG3jd5AqMuqJIriuLwyFb4mLZfqopuYaxme6:Yem3FOjdsuq2l
Checks for missing Authenticode signature.
resource |
---|
fc059489f2961851b27e7b604984b5d5b785a4edb41d6f45887d24d084ff70e9 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
EnumSystemLocalesA
FindResourceA
FindResourceW
FormatMessageW
GetEnvironmentVariableW
GetFileAttributesA
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LeaveCriticalSection
LoadLibraryW
LoadResource
LockResource
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
SizeofResource
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiW
_vsnprintf
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateBindCtx
CreateStreamOnHGlobal
GetHGlobalFromStream
SysAllocString
SysReAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantInit
VariantClear
VariantChangeType
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeTypeEx
SysStringByteLen
SysAllocStringByteLen
LoadRegTypeLib
SystemTimeToVariantTime
RtwqAllocateWorkQueue
RtwqCreateAsyncResult
RtwqPutWorkItem
RtwqShutdown
RtwqStartup
PathIsURLW
PathSearchAndQualifyW
UrlApplySchemeW
UrlCreateFromPathW
UrlUnescapeW
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_assert
_close
_dclass
_errno
_getcwd
_mkdir
_open
_read
_stat32
_strdup
_time32
_wcsicmp
_wfopen
_write
_wstat32
bsearch
calloc
exit
fclose
ferror
fflush
fmod
fopen
fputc
fread
free
fwrite
getenv
isalpha
isspace
iswspace
log10
malloc
memchr
memcmp
memcpy
memmove
memset
pow
qsort
rand
realloc
srand
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncpy
toupper
wcschr
wcscmp
wcsncmp
wcsstr
wcstol
CoInternetCombineUrlEx
CoInternetCombineIUri
CreateAsyncBindCtx
CreateIUriBuilder
CreateUri
CreateURLMoniker
CreateURLMonikerEx
CreateURLMonikerEx2
RegisterBindStatusCallback
CharUpperBuffW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ