DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
70e1bfb3919fe0e2cf8fadcf870b3d40cf3e977893ebe92c3ec8c5735c31e818.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
70e1bfb3919fe0e2cf8fadcf870b3d40cf3e977893ebe92c3ec8c5735c31e818.dll
Resource
win10v2004-20240508-en
Target
70e1bfb3919fe0e2cf8fadcf870b3d40cf3e977893ebe92c3ec8c5735c31e818
Size
212KB
MD5
a33dbdecf5f51678ddb025c815e214e7
SHA1
da38356ea035851d67425d4d63b972cdc3024476
SHA256
70e1bfb3919fe0e2cf8fadcf870b3d40cf3e977893ebe92c3ec8c5735c31e818
SHA512
5205d750d7cd818e73476da7512b6c435bc1facedfda48c272086418c2be26c4685426421d94960e3f0c9c63cd1e1518716cb9d91db1c34029c0dd6debcc8c49
SSDEEP
3072:CHeF4Bv35JlU6bczl6yKOWIM6wk2FsEsRCRE2zNFoQgnOBf2G:QZJJKNskHM6WFwIfRBf2G
Checks for missing Authenticode signature.
resource |
---|
70e1bfb3919fe0e2cf8fadcf870b3d40cf3e977893ebe92c3ec8c5735c31e818 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedExchange
GetOEMCP
GetACP
SetFilePointer
CreateEventA
GetPrivateProfileStringA
WritePrivateProfileStringA
CloseHandle
SetEvent
WaitForSingleObject
InterlockedDecrement
GetDriveTypeA
InterlockedIncrement
lstrcatA
LoadLibraryA
GetProcAddress
LeaveCriticalSection
lstrcpyA
EnterCriticalSection
FindClose
FindNextFileA
FindFirstFileA
GetCurrentThreadId
GetComputerNameA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
FlushFileBuffers
lstrcpynA
TlsFree
DisableThreadLibraryCalls
IsDBCSLeadByte
SetStdHandle
GetLocaleInfoW
GetLastError
LoadLibraryExA
lstrcmpiA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetHandleCount
lstrlenW
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
EnumSystemLocalesA
GetUserDefaultLCID
TlsAlloc
IsBadWritePtr
VirtualAlloc
ExitProcess
VirtualFree
HeapCreate
GetVersion
GetCommandLineA
GetSystemTimeAsFileTime
Sleep
ExitThread
TlsSetValue
CreateThread
RaiseException
HeapReAlloc
HeapAlloc
RtlUnwind
HeapFree
SetLastError
TlsGetValue
TerminateProcess
GetStartupInfoA
GetFileType
GetStdHandle
IsValidCodePage
LCMapStringW
LCMapStringA
GetCurrentProcess
GetLocaleInfoA
SetUnhandledExceptionFilter
IsValidLocale
GetCPInfo
UnhandledExceptionFilter
HeapSize
CharNextA
SetTimer
KillTimer
GetViewportOrgEx
CreatePen
SelectObject
GetObjectType
Ellipse
DeleteObject
GetStockObject
Polygon
CreateICA
CreateSolidBrush
DeleteDC
GetDeviceCaps
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoInitialize
CoUninitialize
CoCreateInstanceEx
SysStringByteLen
SysAllocStringByteLen
VariantClear
LoadTypeLi
RegisterTypeLi
SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString
VarUI4FromStr
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
CStdStubBuffer_QueryInterface
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrDllUnregisterProxy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ