DllRegisterServer
UuvecbcYKTyMrJ6
aUnKtRUjVX5m96z
vkBeRArrLQ2ppqw
Static task
static1
Behavioral task
behavioral1
Sample
813f3101d12c302f224cc93d9d0c96b54503c861604fc4f1385f9d5c4b7e5472.dll
Resource
win7-20240508-en
Target
813f3101d12c302f224cc93d9d0c96b54503c861604fc4f1385f9d5c4b7e5472
Size
405KB
MD5
391d199efcbaddf79315a564ee7868a1
SHA1
aaae8f97f8fe117b3e0a0b5fda3d69a104b8975d
SHA256
813f3101d12c302f224cc93d9d0c96b54503c861604fc4f1385f9d5c4b7e5472
SHA512
105857324f14564eb42528e2da5e4dc53729d9fd5dd514649bd0f324441aeade86dd32700068a14ef4f5adda9bb630e2c769d6ff6e043db640dd00f8b5b22689
SSDEEP
12288:M3hV6Pw4aT23s2oHd9zi3BBoNIQ/hsA7:Yb6Pw4R3s2ai3fUZh
Checks for missing Authenticode signature.
Processes:
resource |
---|
813f3101d12c302f224cc93d9d0c96b54503c861604fc4f1385f9d5c4b7e5472 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetCurrentProcess
VirtualAllocExNuma
ExitProcess
WriteConsoleW
CreateFileW
HeapSize
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapAlloc
GetStdHandle
GetFileType
CloseHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
RtlUnwind
CoTaskMemAlloc
CoTaskMemFree
CoLoadLibrary
DllRegisterServer
UuvecbcYKTyMrJ6
aUnKtRUjVX5m96z
vkBeRArrLQ2ppqw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ