DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
d999e7ee9fb086bf4109f9c1821d959fd8b038902fa6f8dff2c3beafc36bee7b.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d999e7ee9fb086bf4109f9c1821d959fd8b038902fa6f8dff2c3beafc36bee7b.dll
Resource
win10v2004-20240802-en
Target
d999e7ee9fb086bf4109f9c1821d959fd8b038902fa6f8dff2c3beafc36bee7b.dll
Size
347KB
MD5
882e00dd2c44f57162c0ac90858e8fc7
SHA1
8e7c38c20fb19e890c896a4c98108b291237afb8
SHA256
d999e7ee9fb086bf4109f9c1821d959fd8b038902fa6f8dff2c3beafc36bee7b
SHA512
05e75efbd6f383564091950f6d8bfe5069700c859f9beb20a7627fc9052a0cea5beb8d133a4e3fee6c71386992ac4efa6beb5d86262b5729f934a3c0e8c4619b
SSDEEP
6144:DsyrpKZu/6bWNKshx2JZmrxkn3gmAJoYjY2HZA4I:DdVKZu/6phJZminOGOY259I
Checks for missing Authenticode signature.
resource |
---|
d999e7ee9fb086bf4109f9c1821d959fd8b038902fa6f8dff2c3beafc36bee7b.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
ConvertThreadToFiber
CreateFiber
CreateFileA
CreateMailslotA
CreateThread
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetMailslotInfo
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReadFile
Sleep
SleepEx
SwitchToFiber
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
__mb_cur_max
_amsg_exit
_errno
_initterm
_iob
_lock
_unlock
abort
atoi
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
setlocale
strchr
strerror
strlen
strncmp
vfprintf
wcslen
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ