DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d1b1fd3592593b16ee70c95906671e11a3acb59db1cd6019e127926bef2c56dd.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d1b1fd3592593b16ee70c95906671e11a3acb59db1cd6019e127926bef2c56dd.dll
Resource
win10v2004-20240419-en
Target
d1b1fd3592593b16ee70c95906671e11a3acb59db1cd6019e127926bef2c56dd
Size
981KB
MD5
007784aaca553926a4f3a262c9908e88
SHA1
a56a1064a9a114050dc0f9db3f3bbacbe328fa00
SHA256
d1b1fd3592593b16ee70c95906671e11a3acb59db1cd6019e127926bef2c56dd
SHA512
39b42730226b3b301cc17833e5f04cea46c89b1e01c521c22e71074a8d6d22dd25fa4f8429ff49cfaf668cc432901197a67390371d40b29c1933599afbf8a2c1
SSDEEP
12288:cEWFi6pffSl0pam2y8Ohi0UMd8T0qcz1m:cEWMKfe0B2y8S0Mdxqcpm
Checks for missing Authenticode signature.
resource |
---|
d1b1fd3592593b16ee70c95906671e11a3acb59db1cd6019e127926bef2c56dd |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
SystemFunction036
DisableThreadLibraryCalls
EnumResourceNamesW
FileTimeToLocalFileTime
FindResourceW
GetDateFormatW
GetEnvironmentVariableW
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetNumberFormatW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
SizeofResource
TzSpecificLocalTimeToSystemTime
WideCharToMultiByte
_vsnprintf
CLSIDFromProgID
CoGetClassObject
CoTaskMemFree
LoadRegTypeLib
SafeArrayAccessData
SafeArrayCopy
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VarUdateFromDate
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
_assert
_create_locale
_dclass
_free_locale
_itow
_ltow_s
_strdup
_wcsicmp
_wcsnicmp
acos
asin
atan
atan2
bsearch
cos
exp
fmod
free
fwrite
getenv
isalnum
iswalnum
iswalpha
iswspace
log
log10
malloc
memcmp
memcpy
memmove
memset
pow
sin
sqrt
strchr
strcmp
strcpy
strcspn
strlen
tan
towlower
towupper
wcschr
wcscmp
wcscpy
wcsncmp
wcsstr
wcstol
LoadStringW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ