DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ee29bbb338cf29ce4d3a4a28073e71cb5aad1b55cc6b4fffab8653e80da3ca82.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ee29bbb338cf29ce4d3a4a28073e71cb5aad1b55cc6b4fffab8653e80da3ca82.dll
Resource
win10v2004-20240426-en
Target
ee29bbb338cf29ce4d3a4a28073e71cb5aad1b55cc6b4fffab8653e80da3ca82
Size
347KB
MD5
3558343cd176135ebc56fe70a6f79ec2
SHA1
88fd74975e2fbffd72c9f67ddcf6c4a74718c9cb
SHA256
ee29bbb338cf29ce4d3a4a28073e71cb5aad1b55cc6b4fffab8653e80da3ca82
SHA512
b44ad1fadc6a13a74c2cfe118e740c3867359bfd27ff836a231a7e25f105d074fbfa061495cf5b3347c07b29f5fc53b68c31266a9e89c93c2af3aa8bc5970c45
SSDEEP
3072:KcKHnsdI4qkdwZOX36Vn/lNZ5jvnmaGXGIapMaFv:fS4qwi/lNZ5jvnmaGXGIaiaFv
Checks for missing Authenticode signature.
resource |
---|
ee29bbb338cf29ce4d3a4a28073e71cb5aad1b55cc6b4fffab8653e80da3ca82 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AcquireSRWLockExclusive
DelayLoadFailureHook
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetEnvironmentVariableW
GetFullPathNameW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSRWLockExclusive
ResolveDelayLoadedAPI
SizeofResource
WNetGetUniversalNameW
_vsnprintf
SysAllocString
SysFreeString
VariantInit
LoadRegTypeLib
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_assert
_strdup
_stricmp
_wcsicmp
_wcsnicmp
_wtoi
atoi
calloc
free
fwrite
getenv
malloc
memcmp
memmove
memset
realloc
strchr
strcmp
strcspn
strlen
strtok
strtok_s
wcscmp
wcscpy
wcslen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ