DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6c0c26641d7ddec3256b26385f3f5197a1117e9b6803da64506393ffc09817e9.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6c0c26641d7ddec3256b26385f3f5197a1117e9b6803da64506393ffc09817e9.dll
Resource
win10v2004-20240704-en
Target
6c0c26641d7ddec3256b26385f3f5197a1117e9b6803da64506393ffc09817e9
Size
639KB
MD5
2af7f3527f612b798b532c2da28de338
SHA1
d64256c9d99207e17d1f3ac04ad56f2437279524
SHA256
6c0c26641d7ddec3256b26385f3f5197a1117e9b6803da64506393ffc09817e9
SHA512
7b83f9e68d04206ee18c6f3ca2966a30df8c7323bfa2d94d600505f8107a64a0c9b9993769f8aaecc3e8b06f6b9bf366dc0cf930314cb4572c5ae9618b8fe165
SSDEEP
6144:f7OmCnymQHUzZzry4+9++PxmMQvjdOYSfcWWSKi+uJJ7e+04K54a2BTpPN:zorzZzryfY2UuK1/2VpPN
Checks for missing Authenticode signature.
resource |
---|
6c0c26641d7ddec3256b26385f3f5197a1117e9b6803da64506393ffc09817e9 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CreateEventW
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
FindResourceW
FreeLibrary
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableW
GetExitCodeThread
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SizeofResource
Sleep
WaitForMultipleObjects
WaitForSingleObject
lstrcpynW
MFCreateAttributes
MFCreateMediaType
MFCreateMemoryBuffer
MFCreateSample
MFShutdown
MFStartup
MFCreateSourceReaderFromURL
_vsnprintf
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
PropVariantClear
PropVariantToInt64
__acrt_iob_func
__stdio_common_vsprintf
_strdup
calloc
fclose
fopen
fread
free
fseek
ftell
fwrite
getenv
log10
malloc
memcmp
memcpy
memmove
memset
pow
realloc
sqrt
strchr
strcmp
strcspn
strlen
tan
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ