?CreateIConvertInterface@@YAPAVIConvert@@XZ
?FreeIConvertInterface@@YAXPAVIConvert@@@Z
DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
1205bd3d090fd6a0e666a2d8743ffd1f49536aff1fb88d488213b420ad3047b5.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1205bd3d090fd6a0e666a2d8743ffd1f49536aff1fb88d488213b420ad3047b5.dll
Resource
win10v2004-20240508-en
Target
1205bd3d090fd6a0e666a2d8743ffd1f49536aff1fb88d488213b420ad3047b5
Size
396KB
MD5
5c1c461e980aef3f671b82853620cc77
SHA1
35115d10f2120ae3409f5caa34c5f6e146febfff
SHA256
1205bd3d090fd6a0e666a2d8743ffd1f49536aff1fb88d488213b420ad3047b5
SHA512
599dbc342ea4a3645dd4f5291dc396c09bd76ddebe896c79e253f57913991cc38cef88f250241b52d987ce009a049f8fe0e2ec18d23e8673c380d7b69ea40903
SSDEEP
12288:jxL2OWY9jSwbWQBxvJJzfWnMZd4vt1AkmSxI3oyb:t2FapbfWSkmSxI3oyb
Checks for missing Authenticode signature.
resource |
---|
1205bd3d090fd6a0e666a2d8743ffd1f49536aff1fb88d488213b420ad3047b5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsBadStringPtrW
lstrcatW
GetPrivateProfileStringW
lstrcpynW
lstrcmpW
Sleep
CloseHandle
CreateFileW
GetTickCount
SetFilePointer
ReadFile
WriteFile
lstrlenA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetFileAttributesW
SetLastError
SetFileAttributesW
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
CopyFileW
DisableThreadLibraryCalls
CreateDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
GetFileTime
GetFullPathNameW
SetFileTime
GetTempFileNameW
GetTempPathW
SystemTimeToFileTime
GetSystemTime
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetLocaleInfoW
SetStdHandle
SetConsoleCtrlHandler
LoadLibraryA
GetOEMCP
GetACP
UnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
lstrlenW
lstrcmpiW
CompareFileTime
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
FindResourceW
GetLastError
MoveFileW
SizeofResource
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetProcAddress
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
FatalAppExitA
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetCurrentThread
TerminateProcess
GetCurrentProcess
HeapSize
SetUnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
CharUpperBuffW
CharUpperBuffA
LoadStringW
MessageBoxW
CharLowerBuffA
PeekMessageW
TranslateMessage
DispatchMessageW
CharLowerBuffW
CharNextW
wsprintfW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
IsTextUnicode
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CryptAcquireContextW
SHFileOperationW
CreateFileMoniker
CoCreateInstance
CreateBindCtx
SysFreeString
SysAllocString
SysStringLen
VariantInit
CreateURLMoniker
PathIsRelativeW
PathRemoveBackslashW
PathMatchSpecW
PathFindFileNameW
PathRelativePathToW
?CreateIConvertInterface@@YAPAVIConvert@@XZ
?FreeIConvertInterface@@YAXPAVIConvert@@@Z
DllCanUnloadNow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ