DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
Static task
static1
Behavioral task
behavioral1
Sample
d0386afe0232743e96c00b990dbf8377844f5cd2170f07872113d9bef0a1acf3.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d0386afe0232743e96c00b990dbf8377844f5cd2170f07872113d9bef0a1acf3.dll
Resource
win10v2004-20240426-en
Target
d0386afe0232743e96c00b990dbf8377844f5cd2170f07872113d9bef0a1acf3
Size
772KB
MD5
f075af7448af42a75588bd59e1c17ae3
SHA1
ae4ef33d0ae35725ffb9339f91692954c1beed94
SHA256
d0386afe0232743e96c00b990dbf8377844f5cd2170f07872113d9bef0a1acf3
SHA512
4da7aa7b63c606cf7d729517202b5c484b16786351a7d770a09a9ad33415df0dbfcca2bc17a1614b90e9afccd884007d957b287ea78f4a2414744afba125a8e0
SSDEEP
6144:sikOgxG+MiNiLox8Vrg33SXbJCzBeqqjqYd3CxTvovE444lT3:wG+/Ni+8qSLM4qqjqo140
Checks for missing Authenticode signature.
resource |
---|
d0386afe0232743e96c00b990dbf8377844f5cd2170f07872113d9bef0a1acf3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ImpersonateAnonymousToken
ImpersonateLoggedOnUser
NotifyChangeEventLog
ReadEventLogA
RegNotifyChangeKeyValue
RegisterEventSourceA
CloseHandle
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DisconnectNamedPipe
EnterCriticalSection
EscapeCommFunction
FindClose
FindNextStreamW
FlushFileBuffers
GetCommModemStatus
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenEventA
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCommBreak
SetCommMask
SetCurrentDirectoryA
SetEndOfFile
SetEvent
SetLastError
SetNamedPipeHandleState
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeA
lstrlenA
__iob_func
_amsg_exit
_initterm
_lock
_snprintf
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ