DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3dee92fb3f3b6ea0ab664cf67e9bc6d34b708bb80331ed14296b2d229a641b00.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3dee92fb3f3b6ea0ab664cf67e9bc6d34b708bb80331ed14296b2d229a641b00.dll
Resource
win10v2004-20240704-en
Target
3dee92fb3f3b6ea0ab664cf67e9bc6d34b708bb80331ed14296b2d229a641b00
Size
561KB
MD5
63008a0a536b25d2179da9a30dc2eaef
SHA1
e1069f6206d43615552391308aef559bffd05a36
SHA256
3dee92fb3f3b6ea0ab664cf67e9bc6d34b708bb80331ed14296b2d229a641b00
SHA512
da019a75327fad5a1d27345d3b95eb31733ca8dd43da5df55f33b28ca8cd3c89aee7f8ff030813547b1449493bf7bcdeaca05d5a6f43d202e4b15b42298c1bf8
SSDEEP
6144:/9n8YXP0feH24fQnTGbF6l7g+9++QqdDfgdbM5VqEn4h0p5r5R9vj5Y:/QE/fQnTGbREfge5ozwj5Y
Checks for missing Authenticode signature.
resource |
---|
3dee92fb3f3b6ea0ab664cf67e9bc6d34b708bb80331ed14296b2d229a641b00 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CreateEventW
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
FindResourceW
FreeLibrary
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableW
GetExitCodeThread
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
MultiByteToWideChar
OutputDebugStringA
SetEvent
SizeofResource
Sleep
WaitForMultipleObjects
WaitForSingleObject
lstrcpynW
MFCreateAttributes
MFCreateMediaType
MFCreateMemoryBuffer
MFCreateSample
MFShutdown
MFStartup
MFCreateSourceReaderFromURL
_vsnprintf
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
PropVariantClear
PropVariantToInt64
__acrt_iob_func
__stdio_common_vsprintf
_strdup
calloc
fclose
fopen
fread
free
fseek
ftell
fwrite
getenv
log10
malloc
memcmp
memcpy
memmove
memset
pow
realloc
sqrt
strchr
strcmp
strcspn
strlen
tan
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ