DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1b30685db57d25b5b87f6ff3167d8e014ca291497362fa688ea72e9a18b199b6.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1b30685db57d25b5b87f6ff3167d8e014ca291497362fa688ea72e9a18b199b6.dll
Resource
win10v2004-20240226-en
Target
1b30685db57d25b5b87f6ff3167d8e014ca291497362fa688ea72e9a18b199b6
Size
192KB
MD5
db6f5599e8fed7dc72618b36b50c7216
SHA1
e5240c2e40a7d5d176b80dbec5b0cf5abe64cac1
SHA256
1b30685db57d25b5b87f6ff3167d8e014ca291497362fa688ea72e9a18b199b6
SHA512
7a8bda2ea0ccb15033cb18a39a2e9ecfb22dcfff651eb0164de15c4471a6d6223051f8773c5647b32a339981bac6e6e26a3c84fe8aef8267463b360291579f34
SSDEEP
3072:vlTNBARcBBYE+TuM7lnteHpnSs13Z+ZhmCGRAfzl+5q2zYSZ:FN+GP5+TF7lkHks1JOgC/Up1
Checks for missing Authenticode signature.
resource |
---|
1b30685db57d25b5b87f6ff3167d8e014ca291497362fa688ea72e9a18b199b6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
LoadLibraryExW
GetModuleFileNameW
LocalFree
FormatMessageW
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
SetLastError
GetModuleHandleW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
GetModuleHandleA
GetFileAttributesW
FindFirstFileW
GetFileSize
WriteFile
ReadFile
SetEndOfFile
GetCurrentProcess
CreateProcessW
lstrlenW
WaitForMultipleObjects
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetSystemDefaultLangID
WideCharToMultiByte
GlobalUnlock
HeapReAlloc
VirtualQuery
HeapAlloc
HeapFree
OutputDebugStringW
GetProcessHeap
InitializeCriticalSectionAndSpinCount
HeapDestroy
RaiseException
HeapSize
GetLocalTime
DecodePointer
GetModuleFileNameA
SwitchToThread
ReadConsoleW
LCMapStringW
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GlobalLock
MultiByteToWideChar
GetTickCount
CreateEventW
CloseHandle
WaitForSingleObject
InitializeCriticalSection
GetLastError
GetUserDefaultLangID
QueryPerformanceCounter
GetFileType
GetStdHandle
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
AreFileApisANSI
EncodePointer
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
CharUpperW
SendMessageTimeoutW
FindWindowA
LoadBitmapW
DestroyMenu
CreatePopupMenu
InsertMenuItemW
DeleteObject
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
DragFinish
SHGetPathFromIDListW
DragQueryFileW
ReleaseStgMedium
StringFromIID
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ