DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetCommonCfgInfo
SetGlobalInfo
SetPolicyInfo
SetSDGlobalInfo2
SetSDLocalInfoTick
SetSecurityAreaInfo
SetUserInfo
Static task
static1
Behavioral task
behavioral1
Sample
b21eac223070a2b836fa43414ffdebc73479c96dbcdb937ed714a799dd020824.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b21eac223070a2b836fa43414ffdebc73479c96dbcdb937ed714a799dd020824.dll
Resource
win10v2004-20240508-en
Target
b21eac223070a2b836fa43414ffdebc73479c96dbcdb937ed714a799dd020824
Size
2.5MB
MD5
bbfdf8e4b4c73618a7a04ef304dca31f
SHA1
bdd47b060a7e32eb6a458631169a539519d652c9
SHA256
b21eac223070a2b836fa43414ffdebc73479c96dbcdb937ed714a799dd020824
SHA512
23dadfb0224568fdd8e3fc1b25dab6cbf8c486b8ff6b38c3a1f9b6cbeccb11f34a559595be51e2d5fce84842724eb56d06d889054804ab2f3daa889958844437
SSDEEP
49152:RAVEwmds+5fGeOwlWf4A5uYdhYMcXf05pDE8:Kws+z9+ueeMJ
Checks for missing Authenticode signature.
resource |
---|
b21eac223070a2b836fa43414ffdebc73479c96dbcdb937ed714a799dd020824 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WNetGetConnectionW
LocalReAlloc
TlsGetValue
SetErrorMode
SetLastError
GlobalSize
GlobalFlags
GetPrivateProfileIntW
WritePrivateProfileStringW
GlobalFindAtomW
GlobalAddAtomW
LockResource
GetProcessVersion
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapReAlloc
RaiseException
GetCommandLineA
ExitProcess
TerminateProcess
ExitThread
HeapSize
FatalAppExitA
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetComputerNameW
FlushFileBuffers
CreateDirectoryW
GetFileAttributesExA
GetFileAttributesExW
GetVolumeInformationW
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
GlobalFree
TlsAlloc
SetThreadLocale
OutputDebugStringA
LoadLibraryExA
EnumResourceLanguagesW
GetWindowsDirectoryW
QueryPerformanceCounter
OpenSemaphoreW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
DisconnectNamedPipe
CreateIoCompletionPort
CancelIo
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
SetNamedPipeHandleState
LocalAlloc
ReadFile
Sleep
MoveFileW
CopyFileW
SetFileAttributesW
lstrcmpW
RemoveDirectoryW
DeleteFileW
MoveFileExW
GetSystemInfo
FindFirstFileW
FindNextFileW
FindFirstFileA
GetFullPathNameA
SetCurrentDirectoryW
SetEnvironmentVariableW
GetDiskFreeSpaceW
DefineDosDeviceW
SetVolumeLabelW
QueryDosDeviceA
GetLogicalDrives
GetDriveTypeA
VirtualQueryEx
InterlockedExchangeAdd
CreateProcessA
ReadProcessMemory
GetThreadPriority
GetPriorityClass
SetPriorityClass
PulseEvent
SleepEx
InterlockedExchange
AllocConsole
WriteConsoleW
FreeConsole
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
MoveFileExA
RemoveDirectoryA
CopyFileA
CreateDirectoryA
MoveFileA
DeleteFileA
GetFileAttributesA
SetFileAttributesA
GetEnvironmentVariableW
GetTempPathW
GetTempPathA
GetCurrentDirectoryA
ExpandEnvironmentStringsW
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetExitCodeThread
TerminateThread
GetVersionExW
FindResourceExW
OutputDebugStringW
FormatMessageA
FindNextFileA
FindClose
LocalFree
OpenProcess
GetCurrentProcess
CreateThread
GetSystemDirectoryW
GetModuleHandleA
CreateFileA
SuspendThread
SetThreadPriority
ResumeThread
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
FileTimeToLocalFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
UnlockFile
LockFile
DuplicateHandle
lstrcmpA
WaitForMultipleObjects
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreW
FormatMessageW
GetPrivateProfileStringW
GetProfileStringW
GetLongPathNameA
GetLongPathNameW
VirtualProtect
lstrcatW
GetFileInformationByHandle
GetCurrentProcessId
GetModuleHandleW
GetCurrentThreadId
CreateFileW
CloseHandle
GetDriveTypeW
QueryDosDeviceW
GetTickCount
lstrcpyW
lstrcpynW
lstrlenW
WideCharToMultiByte
lstrcpynA
GetLastError
GlobalLock
GlobalUnlock
GetFileAttributesW
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
InterlockedCompareExchange
LoadLibraryW
GetProcAddress
GetCurrentDirectoryW
GetModuleFileNameW
HeapDestroy
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
lstrlenA
GetShortPathNameW
DisableThreadLibraryCalls
LoadLibraryA
SetEndOfFile
SetFilePointer
CreateEventW
SetEvent
ResetEvent
OpenMutexW
CreateMutexW
OpenEventW
InterlockedDecrement
InterlockedIncrement
GetVersion
GetUserDefaultLangID
GetSystemDefaultLangID
BackupWrite
BackupRead
BackupSeek
MultiByteToWideChar
MulDiv
GetExitCodeProcess
GetProcessTimes
FileTimeToSystemTime
GetDiskFreeSpaceExW
GetFileTime
SetFileTime
GetProcessHeap
HeapAlloc
HeapFree
VirtualQuery
CreateProcessW
WriteFile
GetFileSize
DeviceIoControl
GetComputerNameA
MapWindowPoints
GetSysColor
SetActiveWindow
IsWindow
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
SendDlgItemMessageA
GetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetTopWindow
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
UpdateWindow
LoadIconW
LoadCursorW
GetSysColorBrush
ScrollWindow
DestroyMenu
GetMenu
TrackPopupMenu
GetMenuItemInfoW
GetMenuItemCount
CloseDesktop
SetThreadDesktop
GetThreadDesktop
OpenDesktopW
OpenInputDesktop
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
FindWindowExW
GetClassNameW
GetForegroundWindow
CloseWindowStation
SetProcessWindowStation
OpenWindowStationW
MessageBoxW
SendMessageTimeoutW
SetWindowPlacement
DestroyWindow
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
MoveWindow
SetWindowLongW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
DeleteMenu
GetScrollPos
SetScrollPos
wvsprintfW
SetFocus
SetWindowTextW
GetWindow
EnumDesktopWindows
IsWindowVisible
GetWindowLongW
GetParent
InsertMenuW
CreatePopupMenu
SetMenuItemBitmaps
EnableMenuItem
InsertMenuItemW
GetWindowThreadProcessId
GetMenuItemID
GetDlgCtrlID
GetWindowRect
PtInRect
RemoveMenu
GetSubMenu
GetMenuStringW
AppendMenuW
SetScrollInfo
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
UnregisterClassW
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
CheckMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
ShowOwnedPopups
PostMessageW
PostQuitMessage
LoadStringW
GetWindowTextLengthW
GetSystemMetrics
CharUpperW
CloseWindow
FindWindowW
EnumWindowStationsW
EnumDesktopsW
OemToCharBuffA
CharToOemBuffA
wsprintfW
MsgWaitForMultipleObjects
CharNextW
LoadBitmapW
CreateWindowExW
GetClientRect
SendMessageW
AttachThreadInput
ShowWindow
SetWindowPos
SetForegroundWindow
GetWindowTextW
GetWindowTextA
GetDesktopWindow
EnumWindows
EnumChildWindows
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
PolyDraw
SetViewportOrgEx
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
RestoreDC
SaveDC
StartDocW
DeleteDC
CreateBitmap
GetStockObject
GetObjectW
GetDeviceCaps
CreateFontIndirectW
PolyBezierTo
OffsetViewportOrgEx
SetColorAdjustment
DeleteObject
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CopyMetaFileW
CreateDCW
GetDCOrgEx
PolylineTo
GetBitmapBits
BitBlt
GetObjectA
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
GetFileTitleW
ClosePrinter
DocumentPropertiesW
OpenPrinterW
RegOpenKeyW
GetUserNameW
LookupAccountNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
AddAccessAllowedAce
GetAce
AddAce
InitializeAcl
GetLengthSid
GetAclInformation
RegDeleteValueW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
UnlockServiceDatabase
CloseServiceHandle
CreateServiceW
LockServiceDatabase
OpenSCManagerW
DeleteService
OpenServiceW
StartServiceW
ControlService
RegSetValueW
GetFileSecurityW
AllocateAndInitializeSid
EqualSid
FreeSid
SetFileSecurityW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyW
RegConnectRegistryW
RegQueryValueExA
RegSetValueExA
RegEnumKeyW
RegCreateKeyA
RegCreateKeyExA
RegSetKeySecurity
RegOpenKeyA
QueryServiceStatus
QueryServiceConfigW
ChangeServiceConfigW
EnumServicesStatusW
AdjustTokenPrivileges
LookupPrivilegeValueW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
OpenProcessToken
LookupAccountSidW
GetTokenInformation
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
DragQueryFileW
DragAcceptFiles
ord17
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
ReadFmtUserTypeStg
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
ReleaseStgMedium
CoTaskMemRealloc
ReadClassStg
StringFromCLSID
CoDisconnectObject
CoTreatAsClass
VarUI4FromStr
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantClear
SafeArrayRedim
VariantCopy
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
VarCyFromStr
SystemTimeToVariantTime
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysAllocStringLen
SysReAllocStringLen
GetErrorInfo
SetErrorInfo
CreateErrorInfo
VarBstrFromCy
VariantInit
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
RpcStringFreeW
UuidFromStringW
UuidCreate
UuidToStringA
RpcStringFreeA
UuidToStringW
closesocket
shutdown
listen
ntohs
ntohl
getpeername
getsockname
getsockopt
send
recv
sendto
WSAGetLastError
recvfrom
WSACleanup
WSAStartup
connect
socket
WSAIoctl
htons
accept
bind
setsockopt
htonl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetCommonCfgInfo
SetGlobalInfo
SetPolicyInfo
SetSDGlobalInfo2
SetSDLocalInfoTick
SetSecurityAreaInfo
SetUserInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ