DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c846d8a95b7fff626e4822150422ad67655b9b7235285bced630fa387d15284f.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c846d8a95b7fff626e4822150422ad67655b9b7235285bced630fa387d15284f.dll
Resource
win10v2004-20240508-en
Target
c846d8a95b7fff626e4822150422ad67655b9b7235285bced630fa387d15284f
Size
394KB
MD5
482f8bc77825a6b210962d395e975758
SHA1
a30de81c8e366a10070bea3ffdd0ebab0ba9ef3d
SHA256
c846d8a95b7fff626e4822150422ad67655b9b7235285bced630fa387d15284f
SHA512
2bf044fa310538a989ac1bd4a04001b335d86d292f099551ddd161fa5efe4add88f99e66185f686687008d1a16bde0ccf70ee24fd50aae845b2ebe03b9209a44
SSDEEP
3072:eTFNI1v4gqp6Y6mseu6axwesHmLXkrZTQLIPBYcEfElQxbnN/3GWSnS:sFNo4gqoYDgqGOZTNPacZUbN/3GWSnS
Checks for missing Authenticode signature.
resource |
---|
c846d8a95b7fff626e4822150422ad67655b9b7235285bced630fa387d15284f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
StartServiceW
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetComputerNameW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
GetTickCount64
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
RtlUnwind
SizeofResource
Sleep
lstrcmpW
_vsnprintf
CreateStreamOnHGlobal
SysAllocString
SysFreeString
VariantClear
NdrClientInitializeNew
NdrConformantStringBufferSize
NdrConformantStringMarshall
NdrConvert
NdrFreeBuffer
NdrGetBuffer
NdrPointerBufferSize
NdrPointerMarshall
NdrPointerUnmarshall
NdrSendReceive
NdrSimpleStructMarshall
NdrSimpleStructUnmarshall
RpcBindingFromStringBindingW
RpcRaiseException
RpcStringBindingComposeW
RpcStringFreeW
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
_wcsdup
_wcsicmp
calloc
free
fwrite
getenv
malloc
memcmp
memcpy
memmove
strchr
strcmp
strcspn
strlen
wcsrchr
wcstol
CreateXmlReader
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ