DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b2d57ff51da14d813c71f76c03f33f20N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2d57ff51da14d813c71f76c03f33f20N.dll
Resource
win10v2004-20240802-en
Target
b2d57ff51da14d813c71f76c03f33f20N.exe
Size
100KB
MD5
b2d57ff51da14d813c71f76c03f33f20
SHA1
d211d92f1eb80f45ddc1766f3324122607a93ecd
SHA256
cc252bc578a13bd91821b0a96f8ea2fdfb50020bab339a2986b99de7c4415a96
SHA512
9eace883ccd71050293d83a307b94890779825bf22dc7d7324a15866d86992bffdf1ca574b79161955c6aced81d3a70a9694016f14ecfed259b043f2fd836239
SSDEEP
1536:ekmqqWkYdrJp4IZxxVL1K7jCQZP9zNnpOe+p/x7PKJ3Bdtcg2D2:3zk8rL3VJSjCeFqeKxCJRwgb
Checks for missing Authenticode signature.
resource |
---|
b2d57ff51da14d813c71f76c03f33f20N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DeleteObject
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
DestroyMenu
CreatePopupMenu
MessageBoxW
RegisterClipboardFormatW
LoadStringW
InsertMenuItemW
CharUpperW
LoadBitmapW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
SHGetPathFromIDListW
SHGetDesktopFolder
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
IsProcessorFeaturePresent
GetSystemDefaultLangID
GetUserDefaultLangID
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
IsDebuggerPresent
QueryPerformanceCounter
InitializeSListHead
RtlUnwindEx
VirtualQuery
InterlockedFlushSList
EncodePointer
RaiseException
Sleep
ExitProcess
GetModuleHandleExW
SetUnhandledExceptionFilter
InitializeCriticalSection
GetSystemTimeAsFileTime
GlobalLock
GetTickCount
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
LocalFree
FormatMessageW
GetCurrentDirectoryW
CreateFileW
SetFileTime
CloseHandle
SetLastError
GetCurrentProcessId
GetCurrentThreadId
FindClose
FindFirstFileW
GetFileAttributesW
GetFileInformationByHandle
FindFirstStreamW
FindNextStreamW
GetFileSize
ReadFile
GetCurrentProcess
GetModuleHandleW
GetProcAddress
CreateProcessW
lstrlenW
GlobalSize
GlobalUnlock
memcpy
wcsstr
memset
memcmp
__C_specific_handler
_amsg_exit
_CxxThrowException
__DestructExceptionObject
_local_unwind
wcscmp
srand
rand
wcslen
_callnewh
malloc
_initterm
_initterm_e
free
abort
_errno
strcpy_s
__CppXcptFilter
__getmainargs
_msize
?terminate@@YAXXZ
realloc
memmove
__CxxFrameHandler3
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ