DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2d6b6eed04d95b213c158a5edd4fdca0d63a994428ac2a3cada219b110a54736.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d6b6eed04d95b213c158a5edd4fdca0d63a994428ac2a3cada219b110a54736.dll
Resource
win10v2004-20240611-en
Target
2d6b6eed04d95b213c158a5edd4fdca0d63a994428ac2a3cada219b110a54736
Size
144KB
MD5
1bbbab4c0e88e3c3a0f4d1207c5e5685
SHA1
936b177467bd120ac987250a0e8392c5401c6cc9
SHA256
2d6b6eed04d95b213c158a5edd4fdca0d63a994428ac2a3cada219b110a54736
SHA512
b37290c58bcaa389c8d8601631af5eb9c655bc9ae7a6ed0a876803b6e207bafec6cf134db6254a9b7ad05400ebd743d17f1ada9ff8a14f09cb57ce9979a05d61
SSDEEP
3072:fJ803GesSnkmKRWbvh4wlThx2T9jOSllHFcnF9/XV01vWM:fJ7Ges2kmXbWUhx29Zcn
Checks for missing Authenticode signature.
resource |
---|
2d6b6eed04d95b213c158a5edd4fdca0d63a994428ac2a3cada219b110a54736 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetFileAttributesA
GetWindowsDirectoryA
GetVersion
GetModuleFileNameA
CreateDirectoryA
MultiByteToWideChar
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
CloseHandle
FreeLibrary
InterlockedIncrement
GetShortPathNameA
CreateProcessA
lstrcpyA
OpenFile
CopyFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
OutputDebugStringA
DebugBreak
lstrlenA
WideCharToMultiByte
InterlockedDecrement
lstrlenW
OpenProcess
GetLastError
LocalFree
RtlUnwind
GetCommandLineA
RaiseException
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapAlloc
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
wsprintfA
CharNextA
wvsprintfA
LoadStringA
OpenProcessToken
ImpersonateLoggedOnUser
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RevertToSelf
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
CoTaskMemFree
StringFromCLSID
CoCreateInstance
OleRun
GetErrorInfo
SysStringLen
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
SysFreeString
StrStrIA
ord23
ord21
ord16
ord15
ord18
ord58
ord57
ord30
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ