DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
61fe671afa791b9670197e617c65ecaa361ef1d36a7b340229db0f42912438f2.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61fe671afa791b9670197e617c65ecaa361ef1d36a7b340229db0f42912438f2.dll
Resource
win10v2004-20240704-en
Target
61fe671afa791b9670197e617c65ecaa361ef1d36a7b340229db0f42912438f2
Size
647KB
MD5
166f828d434569fb1f9476e109c5d8d0
SHA1
80cd674ed75a9300c82e42b9b488d5481d406d48
SHA256
61fe671afa791b9670197e617c65ecaa361ef1d36a7b340229db0f42912438f2
SHA512
bbc5871954806d3391e1731c710b2da31b04069b9cacdd0dd86e9eee1c7f55f61b92e81f8b8a1c0fed13175a9b730f4fbd6f0a5c7672ac351bee54cacf3df9b2
SSDEEP
6144:WHTcPJozPb8E0qB26sn7PMZ+HZ81NZfZGZMERANc87cAE2LBwTk:w0J8T8E0mYPic/AE2LBwTk
Checks for missing Authenticode signature.
resource |
---|
61fe671afa791b9670197e617c65ecaa361ef1d36a7b340229db0f42912438f2 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DirectSoundCreate
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
FileTimeToSystemTime
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
LoadLibraryW
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SetThreadDescription
SizeofResource
SleepConditionVariableCS
WaitForSingleObject
WakeConditionVariable
_vsnprintf
CoCreateInstance
CreateStreamOnHGlobal
__acrt_iob_func
__stdio_common_vsprintf
_assert
_strdup
calloc
free
fwrite
getenv
isprint
malloc
memcmp
memcpy
memmove
round
strchr
strcmp
strcspn
strlen
GetForegroundWindow
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ