DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
788f8bba1ab54c7e27050dc229637566443c52d8b7680ca7c7cff5122359f98b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
788f8bba1ab54c7e27050dc229637566443c52d8b7680ca7c7cff5122359f98b.dll
Resource
win10v2004-20240508-en
Target
788f8bba1ab54c7e27050dc229637566443c52d8b7680ca7c7cff5122359f98b
Size
940KB
MD5
28c37e05f7beb7ea1890997d07a85c78
SHA1
6dcee2fa1cca483fa62c8947584d9eb15bd27ab4
SHA256
788f8bba1ab54c7e27050dc229637566443c52d8b7680ca7c7cff5122359f98b
SHA512
1d53bb6aa8c42f270149bde9a4a68638fccebcae8b261619089f660d9ab2497c0115acd2653c33fd231e74d3b7dba34b2d189dd7a0d4b0e91e70dfc6f1ff2e21
SSDEEP
12288:iozEyGMFBlu3DlgxDxAmFqX3a8rWgNoGnhnOdA44:iodnClgxD7o3a8t6C44
Checks for missing Authenticode signature.
resource |
---|
788f8bba1ab54c7e27050dc229637566443c52d8b7680ca7c7cff5122359f98b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
CreateThread
CloseHandle
GetModuleHandleA
lstrlenA
DisableThreadLibraryCalls
lstrlenW
GlobalFree
GlobalAlloc
LockResource
SizeofResource
LoadResource
GetComputerNameA
GetCurrentProcessId
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
LocalFree
WideCharToMultiByte
FormatMessageA
LeaveCriticalSection
GetLocalTime
EnterCriticalSection
FindResourceA
CreateProcessA
HeapAlloc
GetEnvironmentVariableA
TerminateProcess
SetStdHandle
GetCurrentProcess
IsBadCodePtr
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoW
SetEndOfFile
LoadLibraryA
CreateFileA
ReadFile
FlushFileBuffers
InterlockedExchange
GetLastError
RtlUnwind
RaiseException
HeapFree
HeapReAlloc
Sleep
GetCommandLineA
GetVersion
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetStringTypeA
IsBadReadPtr
HeapSize
SetUnhandledExceptionFilter
GetModuleFileNameA
WriteFile
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetStringTypeW
FreeEnvironmentStringsW
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
GetLocaleInfoA
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
FindWindowA
SendMessageA
OleRun
CoCreateInstance
SysAllocString
SysFreeString
SysStringByteLen
GetErrorInfo
SysAllocStringByteLen
SysAllocStringLen
VariantClear
ord25
ord23
ord32
ord16
ord15
ord21
ord57
ord30
ord18
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ