DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
Static task
static1
Behavioral task
behavioral1
Sample
dd11e5d6839bfb0bd1020c64eb1f8090e60c2987db466dfbcae4512697026141.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
dd11e5d6839bfb0bd1020c64eb1f8090e60c2987db466dfbcae4512697026141.dll
Resource
win10v2004-20240802-en
Target
dd11e5d6839bfb0bd1020c64eb1f8090e60c2987db466dfbcae4512697026141
Size
792KB
MD5
3d34f6585bb4f52084e51682b77d9e9e
SHA1
06c1c428ec1eeb0689622e8b2ad6c1f8f23e98e8
SHA256
dd11e5d6839bfb0bd1020c64eb1f8090e60c2987db466dfbcae4512697026141
SHA512
214deb96affb77a9257e107622a75d3989fa8b35038f0d5176134a0c27612cd538366f52ddda831d58772857a6ce4f789a5e60537bc45b157f467a844a752208
SSDEEP
6144:1+JolktlXL3pUPepUG4q2jCid4+MdS/Lj9xRKlYBCLdOsJGqD:vGtZL3pUPfG/6dBMdSjj9xUlDdr1
Checks for missing Authenticode signature.
resource |
---|
dd11e5d6839bfb0bd1020c64eb1f8090e60c2987db466dfbcae4512697026141 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ClearEventLogA
RegisterEventSourceA
CloseHandle
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DisconnectNamedPipe
EnterCriticalSection
GetCommModemStatus
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenEventA
QueryPerformanceCounter
ReadConsoleW
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCommMask
SetCurrentDirectoryA
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
lstrlenA
__iob_func
_amsg_exit
_initterm
_lock
_snprintf
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ