DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dbb6060d9512dc2b859b62d3f37177b878070178bb8cf9ba241d1984098c9fb5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dbb6060d9512dc2b859b62d3f37177b878070178bb8cf9ba241d1984098c9fb5.dll
Resource
win10v2004-20240508-en
Target
dbb6060d9512dc2b859b62d3f37177b878070178bb8cf9ba241d1984098c9fb5
Size
188KB
MD5
7a7f4f4bce110c580fb93ab6f666cc01
SHA1
1cf15a11c0b66eca8421e39122cac232ec494497
SHA256
dbb6060d9512dc2b859b62d3f37177b878070178bb8cf9ba241d1984098c9fb5
SHA512
0c546abc56cfe39aaa8f4b6785669c95c0544b67c223deb9aa131b088a5c5530c60c44150c27a2ec7e6f9ce0bc7d8c308fec2c5e4a1e92222d623ff0cfe62c73
SSDEEP
1536:WqnTo5ebh8xZTNMD5gHGGfFBXtxE+llwcUtWwYCulkalSAbeq87CDBP0kcVtTr+t:gsbZgHG4XQzca3YCuJlSAbmzrD6
Checks for missing Authenticode signature.
resource |
---|
dbb6060d9512dc2b859b62d3f37177b878070178bb8cf9ba241d1984098c9fb5 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
FormatMessageW
GetComputerNameW
GetDateFormatW
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
GetTickCount
GetTimeFormatW
GetVersionExW
GetWindowsDirectoryW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
K32EnumProcessModules
K32EnumProcesses
K32GetModuleBaseNameW
LoadLibraryW
LoadResource
MultiByteToWideChar
OpenProcess
SizeofResource
lstrcmpW
_vsnprintf
Direct3DCreate9
DirectDrawCreateEx
DirectSoundCaptureEnumerateW
DirectSoundEnumerateW
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromGUID2
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantCopy
VariantInit
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcschr
wcsrchr
EnumDisplayDevicesW
LoadStringW
wsprintfW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ