DllRegisterServer
DllRoGetClassObject
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
480b82dc76b3205dad30aa6b050bac0707bdf6837f6b969ed5489a27ace05870.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
480b82dc76b3205dad30aa6b050bac0707bdf6837f6b969ed5489a27ace05870.dll
Resource
win10v2004-20240419-en
Target
480b82dc76b3205dad30aa6b050bac0707bdf6837f6b969ed5489a27ace05870
Size
216KB
MD5
ac22d186b91b0aed3d3cca047c168209
SHA1
f57130e31658b22977191c2f44f41120993c45c6
SHA256
480b82dc76b3205dad30aa6b050bac0707bdf6837f6b969ed5489a27ace05870
SHA512
baf888c619c54b610befb5ce5e3e5b13743e48e34303f9d0308d886b4eff202e02ffa1e9c82f5e836907d25093f13bdf266eb3f0ec71a85e2d46ffc5c6ebfc8a
SSDEEP
3072:qBLY086BgmrIVrJoz6vVrk2vKe6HPQlDFyN/aZ8x9pwgaDI/Sx3Ak:6+NrW+Vk/bvyFeoxQ
Checks for missing Authenticode signature.
resource |
---|
480b82dc76b3205dad30aa6b050bac0707bdf6837f6b969ed5489a27ace05870 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathRenameExtensionA
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
OpenFileMappingA
GetProcAddress
GetTempPathA
GetCurrentProcessId
WideCharToMultiByte
GetVersionExA
MultiByteToWideChar
FormatMessageA
LocalFree
FormatMessageW
SetFilePointer
ExitProcess
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetCurrentThreadId
GetNumberFormatA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleA
TlsAlloc
SetLastError
GetLastError
TlsFree
GetSystemDefaultLangID
TlsGetValue
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
HeapSize
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
SetStdHandle
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
FlushFileBuffers
GetLocaleInfoA
FreeLibrary
LoadLibraryA
GetModuleFileNameA
GetCommandLineA
TlsSetValue
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
LoadStringW
LoadStringA
ShellExecuteExA
DllRegisterServer
DllRoGetClassObject
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ