GetLoadStatus
SetHook
UnsetHook
Static task
static1
Behavioral task
behavioral1
Sample
1012eae65987061726c6209f1e3962051b90aac1f8bdf731e512f68940a76f29.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1012eae65987061726c6209f1e3962051b90aac1f8bdf731e512f68940a76f29.dll
Resource
win10v2004-20240802-en
Target
1012eae65987061726c6209f1e3962051b90aac1f8bdf731e512f68940a76f29.dll
Size
248KB
MD5
2d3702b366f4beb050cc55108496b8af
SHA1
04116170a8596bf68698c2bd89330d0b6ae7c6b1
SHA256
1012eae65987061726c6209f1e3962051b90aac1f8bdf731e512f68940a76f29
SHA512
a254e043b1bffbffdb7198905a1f85f006787326aa9034cc676dcf89fb5efb0f4a9f93caec78a8b7a166bd627aa4146b084b103842feb3216111dbd4d81c0969
SSDEEP
6144:zPotONhclp61VE9ucRSPPzK2DIypT+kHberN052:jotahcfgeucRWHarN052
Checks for missing Authenticode signature.
resource |
---|
1012eae65987061726c6209f1e3962051b90aac1f8bdf731e512f68940a76f29.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
FindFirstFileW
SetLastError
FindNextFileW
GetCurrentProcess
FindClose
ResumeThread
CloseHandle
GetThreadContext
WriteConsoleW
CreateFileW
SetStdHandle
HeapSize
HeapReAlloc
ReadConsoleW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InitializeCriticalSectionEx
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
SHGetFolderPathW
SymEnumSymbols
SymCleanup
SymInitialize
GetLoadStatus
SetHook
UnsetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ