__deregister_frame_info
__register_frame_info
Static task
static1
Behavioral task
behavioral1
Sample
onlnmf.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
onlnmf.dll
Resource
win10v2004-20240508-en
Target
onlnmf.dll
Size
46KB
MD5
0f7f214bde13a4d4295dded79b42343f
SHA1
cd484895117280bf5d5cf4f3bfe385de308cdf95
SHA256
fb3893d85570ac9361a96771c17abda6b0ec0150cca9b8d9000803801bbcb8ca
SHA512
22dda9a9d910a1073809e75a5b60dfe204ff66e10b3d1ff1a19bc5fa8bf84432cce7019b28b84e1d78a0ccd0374628c0e5e6b96c555a1ea67f06d049fbf80873
SSDEEP
768:9AQGgs0GsNWHLrt0TQpTb9YFIEzL4LB7UyPKip3LL:9agzAH10TQpvkLk7rPXp3n
Checks for missing Authenticode signature.
resource |
---|
onlnmf.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TerminateProcess
GetCurrentProcess
CloseHandle
VirtualAllocEx
ExitProcess
Sleep
RaiseException
GetProcAddress
EncodePointer
InterlockedFlushSList
RtlUnwindEx
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleExW
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
FreeLibrary
RtlCaptureContext
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
NtSetContextThread
NtWriteVirtualMemory
NtGetContextThread
NtResumeThread
?terminate@@YAXXZ
__getmainargs
strcpy_s
_errno
abort
free
_initterm_e
_initterm
malloc
_callnewh
memmove
_local_unwind
__DestructExceptionObject
_amsg_exit
memset
__C_specific_handler
_CxxThrowException
__CxxFrameHandler3
memcmp
__CppXcptFilter
memcpy
__deregister_frame_info
__register_frame_info
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ