DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5f384877a3f17ea6dd77c15bb4efc8d758152fa7771ae4991fa763cde27476aa.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5f384877a3f17ea6dd77c15bb4efc8d758152fa7771ae4991fa763cde27476aa.dll
Resource
win10v2004-20240508-en
Target
5f384877a3f17ea6dd77c15bb4efc8d758152fa7771ae4991fa763cde27476aa
Size
311KB
MD5
d98bf86addc9bef265062224f4516211
SHA1
7b45c7ab3dc544c1d8d19989cfe882bf178304bf
SHA256
5f384877a3f17ea6dd77c15bb4efc8d758152fa7771ae4991fa763cde27476aa
SHA512
8c3c25c102e613d0ec0c14fc08d192d8378f5b48f56cc1117fe6b6d982c6ac1a2fa3f3d3683e9957e1e08b2b2def59528d44104368bb609dce8731a65f004162
SSDEEP
3072:hUS7lb2tWpOtQn8WeQaZjS+RokPZFk6mG35N8teJW8rWONRKWwyCjkNHQvwXID1:dMt0nL/aZbjFk6mG35NsZ8ncx9rU
Checks for missing Authenticode signature.
resource |
---|
5f384877a3f17ea6dd77c15bb4efc8d758152fa7771ae4991fa763cde27476aa |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
wcscmp
_purecall
__CxxFrameHandler
_strnicmp
toupper
iswdigit
_EH_prolog
realloc
malloc
free
??3@YAXPAX@Z
??2@YAPAXI@Z
_wmakepath
_wsplitpath
vswprintf
wcslen
iswctype
_wtoi
_wcsicmp
_CxxThrowException
_beginthreadex
__RTDynamicCast
wcstoul
wcsncpy
wcsspn
wcscspn
_wcsupr
_snwprintf
__dllonexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
_except_handler3
ord15
ord32
ord21
ord16
ord24
ord18
ord22
ord23
SetLastError
FlushInstructionCache
InitializeCriticalSection
FormatMessageW
LocalFree
GetSystemWindowsDirectoryW
lstrcpyW
CloseHandle
lstrcmpW
DeleteCriticalSection
GetLastError
CreateMutexW
ReleaseMutex
GetModuleHandleW
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
GetUserDefaultLangID
GetCurrentProcess
ResetEvent
LeaveCriticalSection
lstrlenW
lstrlenA
WideCharToMultiByte
SetEvent
WaitForSingleObject
GetModuleFileNameW
DisableThreadLibraryCalls
CreateEventW
LocalAlloc
GetParent
CallWindowProcW
GetWindowTextW
GetWindowTextLengthW
DefWindowProcW
GetWindowLongW
SetWindowLongW
wsprintfW
EndDialog
GetWindowRect
SystemParametersInfoW
GetClientRect
SetWindowPos
SendMessageW
GetDlgItem
GetWindow
LoadStringW
RegisterWindowMessageW
SetWindowTextW
MessageBoxW
GetActiveWindow
SetCursor
ReleaseDC
GetPropW
RemovePropW
GetCursor
SetPropW
DialogBoxParamW
EnableWindow
LoadIconW
GetClassNameW
GetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
SetFocus
SetDlgItemTextW
InsertMenuW
GetCursorPos
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
WinHelpW
GetDlgCtrlID
EnumChildWindows
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
DestroyWindow
MoveWindow
ShowWindow
SetActiveWindow
LoadCursorW
GetDC
SelectObject
GetTextExtentPointW
GetTextMetricsW
CreateFontIndirectW
DPtoLP
GetDeviceCaps
DeleteObject
PropertySheetW
CreatePropertySheetPageW
DestroyPropertySheetPage
InitCommonControlsEx
CLSIDFromString
CoCreateInstance
SysAllocString
SysFreeString
ResUtilFindMultiSzProperty
ResUtilFindDwordProperty
ResUtilVerifyPropertyTable
ResUtilFindSzProperty
ClusterRegOpenKey
GetClusterInformation
SetClusterResourceName
GetClusterResourceNetworkName
CloseClusterGroup
CloseClusterResource
OpenClusterGroup
ClusterResourceControl
ClusterResourceTypeControl
ClusterNodeControl
ClusterGroupControl
ClusterNetworkControl
ClusterCloseEnum
ClusterEnum
ClusterOpenEnum
CloseClusterNetwork
CloseClusterNode
OpenClusterResource
SetClusterGroupName
CreateClusterGroup
DeleteClusterGroup
DeleteClusterResource
ClusterResourceCloseEnum
ClusterResourceEnum
ClusterResourceOpenEnum
ClusterGroupCloseEnum
ClusterGroupEnum
ClusterGroupOpenEnum
OpenClusterNetwork
OpenClusterNode
SetClusterGroupNodeList
CreateClusterResource
RemoveClusterResourceDependency
AddClusterResourceDependency
RemoveClusterResourceNode
AddClusterResourceNode
ClusterRegCloseKey
ClusterRegQueryValue
GetClusterKey
RtlFreeAnsiString
RtlUnicodeStringToOemString
RtlUnicodeStringToAnsiString
RtlFreeOemString
RtlNtStatusToDosError
RtlInitUnicodeString
NetpNetBiosReset
NetpNetBiosStatusToApiStatus
NetpwNameValidate
Netbios
inet_addr
ntohl
DnsValidateName_W
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ