DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
00128e868aaefd79bce2ec463cb44e4045fbbe5035013396fffded45c96ec26d.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
00128e868aaefd79bce2ec463cb44e4045fbbe5035013396fffded45c96ec26d.dll
Resource
win10v2004-20240426-en
Target
00128e868aaefd79bce2ec463cb44e4045fbbe5035013396fffded45c96ec26d
Size
72KB
MD5
b3e5ff5f6ff9d4aa2bc13b19e09d15e8
SHA1
e05275b77717f637446e1347c57f26c734ffca60
SHA256
00128e868aaefd79bce2ec463cb44e4045fbbe5035013396fffded45c96ec26d
SHA512
2edee7e898e6f956dcf8e59613b86bade828dfce6aaaee0587d7c4b0d1667e8936a802ea06976ed394daf6b6b3b3db42052036222e04b05db30020bba04f7805
SSDEEP
384:IJ6pkK395IK/iwrr47Cxbz7IrwPfHROfNOYQL0e9gAva8bK2SW6/m:I82K3AK/iwr8WxqefHklbLe9gv2Ss
Checks for missing Authenticode signature.
resource |
---|
00128e868aaefd79bce2ec463cb44e4045fbbe5035013396fffded45c96ec26d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
WindowsGetStringRawBuffer
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
_vsnprintf
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen
wcscmp
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ