DllSetMemoryErrorHandler
FME_acceptSession
FME_apiVersion
FME_createFunction
FME_destroyFunction
Static task
static1
Behavioral task
behavioral1
Sample
8fdc4e1b86bfca47229e8a0a5f3884b93bf05cdb9fe8d6d8f4dd1c41bc2a5afc.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8fdc4e1b86bfca47229e8a0a5f3884b93bf05cdb9fe8d6d8f4dd1c41bc2a5afc.dll
Resource
win10v2004-20240426-en
Target
8fdc4e1b86bfca47229e8a0a5f3884b93bf05cdb9fe8d6d8f4dd1c41bc2a5afc
Size
652KB
MD5
a7f6170850411f2ac2a46ab346b85732
SHA1
cdf3763d47a6cbf31690cd7e5f3594260611a32a
SHA256
8fdc4e1b86bfca47229e8a0a5f3884b93bf05cdb9fe8d6d8f4dd1c41bc2a5afc
SHA512
a6dae16855b038769673e3ebe2e168810ecb891471b8df2d837a6163eab7e60d24e57e650e9cbb62482901665682cec75624a1894fa5e1f0d8546b0717f0d64c
SSDEEP
12288:fyK4806t7k3EkZkqRe/jEw7slYRr4ysJfhUagl42Lx:fyK4806t7k3EW7Re/A9lQsJfhSxL
Checks for missing Authenticode signature.
resource |
---|
8fdc4e1b86bfca47229e8a0a5f3884b93bf05cdb9fe8d6d8f4dd1c41bc2a5afc |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualLock
VirtualAlloc
VirtualFree
DebugBreak
GetLastError
GetSystemInfo
IsBadCodePtr
VirtualQueryEx
GetCurrentProcessId
CreateMutexA
GetCurrentThreadId
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
CreateEventA
VirtualQuery
GetVersion
UnmapViewOfFile
OpenProcess
GetCurrentProcess
OpenMutexA
MapViewOfFileEx
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
OutputDebugStringA
IsDebuggerPresent
HeapFree
GetProcessHeap
HeapAlloc
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
SetEvent
LeaveCriticalSection
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindNextFileA
FindFirstFileExA
GetOEMCP
IsValidCodePage
ReadConsoleW
SetStdHandle
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
GetStdHandle
GetFileType
CreateFileW
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
LoadLibraryExW
RtlUnwind
RaiseException
TerminateProcess
InitializeSListHead
QueryPerformanceCounter
FindClose
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
FreeLibrary
GetUserDefaultLCID
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
??1?$UString@$0A@@ex@stk@@QAE@XZ
??0?$UString@$0A@@ex@stk@@QAE@PBDIABVEncoding@12@@Z
??0ObsoleteRegexp@@QAE@PBD@Z
??1?$PimplBase@VObsoleteRegexpImpl@@@detail@ex@stk@@IAE@XZ
DllSetMemoryErrorHandler
FME_acceptSession
FME_apiVersion
FME_createFunction
FME_destroyFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ