DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9612956511e76dac7006ca25db478f7667d12a484fb34183d3cdcb9a0202f001.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
9612956511e76dac7006ca25db478f7667d12a484fb34183d3cdcb9a0202f001.dll
Resource
win10v2004-20240508-en
Target
9612956511e76dac7006ca25db478f7667d12a484fb34183d3cdcb9a0202f001
Size
136KB
MD5
ba629f044ff405b03269018e2ca1d97d
SHA1
55d7de2a3f836857104c2d4693d80944df76d0cb
SHA256
9612956511e76dac7006ca25db478f7667d12a484fb34183d3cdcb9a0202f001
SHA512
ea2be8c7d8c2d510f15e9347502b897cc22229b2a7c35d36c9f25f5526c66279b9560b8323ce2385eb5c645c4a36c735766f18814c0acbcfb16e50f9639f6fcf
SSDEEP
1536:1uEm4xqjtbCGB7d8p13VBF4UGv4ed+h1PvXOL4kAisY76Gd/KceIOax4EXDGCYer:gD40bAKOdv9jih76O/leIOaxpXDzYY
Checks for missing Authenticode signature.
resource |
---|
9612956511e76dac7006ca25db478f7667d12a484fb34183d3cdcb9a0202f001 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetTempPathW
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
SizeofResource
WriteFile
__iob_func
_strdup
_vsnprintf
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcpy
strcspn
strlen
ShellExecuteW
PathFindExtensionW
wsprintfW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ