CreateTicket
DestroyTicket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetExtensionVersion
GetFilterVersion
HttpExtensionProc
HttpFilterProc
TerminateExtension
TerminateFilter
Static task
static1
Behavioral task
behavioral1
Sample
d3f029da22b3f351cbcfacc6149a9d56c44fb8ce79ce258af00dff8e7504155c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3f029da22b3f351cbcfacc6149a9d56c44fb8ce79ce258af00dff8e7504155c.dll
Resource
win10v2004-20240226-en
Target
d3f029da22b3f351cbcfacc6149a9d56c44fb8ce79ce258af00dff8e7504155c
Size
216KB
MD5
de902e71c366d6a274a258e7c07ed431
SHA1
24fa9eddb131752e4c7a021fd39d731e8e7ff774
SHA256
d3f029da22b3f351cbcfacc6149a9d56c44fb8ce79ce258af00dff8e7504155c
SHA512
72b1182eabe91afdf71d38c2f79df12527858010006bee232cb738819255be6fd742c09ed09160d88efc7b17064ff4ef1d35bd6f4bc4428ae557ea41444304cc
SSDEEP
3072:+hd1dzJLOHGTFyyRiaovYoVHCbo9UkYrIqqbNYacMiIuTokT5kj0GMf:+DzJekYykaLo4KRYrIqqbea+T5kjf6
Checks for missing Authenticode signature.
resource |
---|
d3f029da22b3f351cbcfacc6149a9d56c44fb8ce79ce258af00dff8e7504155c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
lstrcatA
GetModuleFileNameA
GetSystemTime
SetFileTime
LoadLibraryA
GetTickCount
FindClose
FindFirstFileA
FileTimeToSystemTime
GetLocalTime
QueryPerformanceCounter
QueryPerformanceFrequency
LocalAlloc
FormatMessageA
SystemTimeToFileTime
GetLastError
Sleep
GetFileTime
LocalFree
CreateFileW
CreateFileA
SetFilePointer
ReadFile
CloseHandle
DeleteFileW
DeleteFileA
WriteFile
lstrlenW
WideCharToMultiByte
InterlockedDecrement
GetProcAddress
FreeLibrary
GetCurrentThread
GetModuleHandleA
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
InterlockedExchange
SetEvent
ReleaseMutex
SetUnhandledExceptionFilter
WaitForSingleObject
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetEndOfFile
GetFileSize
CreateEventA
CreateMutexA
FlushViewOfFile
DuplicateHandle
InterlockedIncrement
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetModuleFileNameW
VirtualQuery
OutputDebugStringA
GetTempPathA
LoadLibraryExA
FormatMessageW
GetVersionExA
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
HeapFree
ExitProcess
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapAlloc
LCMapStringA
LCMapStringW
VirtualAlloc
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentVariableA
HeapCreate
VirtualFree
IsBadReadPtr
HeapReAlloc
IsBadWritePtr
HeapSize
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CharNextA
wsprintfA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
RegCreateKeyExW
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RevertToSelf
LogonUserA
ImpersonateLoggedOnUser
DeregisterEventSource
ReportEventW
RegisterEventSourceW
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoCreateInstance
LoadTypeLi
SafeArrayCreate
VariantChangeType
SafeArrayPutElement
SafeArrayDestroy
SystemTimeToVariantTime
VariantInit
VariantCopy
SysAllocString
CreateErrorInfo
RegisterTypeLi
VariantClear
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
GetErrorInfo
CreateTicket
DestroyTicket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetExtensionVersion
GetFilterVersion
HttpExtensionProc
HttpFilterProc
TerminateExtension
TerminateFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ