DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
97f538582d7c541dce072f9f0c7582d510281a09b8fc8fde1645af305d486452.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
97f538582d7c541dce072f9f0c7582d510281a09b8fc8fde1645af305d486452.dll
Resource
win10v2004-20240802-en
Target
97f538582d7c541dce072f9f0c7582d510281a09b8fc8fde1645af305d486452.exe
Size
429KB
MD5
37a918497fbe7f7dae0464e897eb72c2
SHA1
c8bb6f426a8e3002d96b3a72225e04367c53000e
SHA256
97f538582d7c541dce072f9f0c7582d510281a09b8fc8fde1645af305d486452
SHA512
9f63da79c97d57fab779523155cfd2d7e3e8380c5826b0c59d088fb1b89502e2dd88e7836441777e09034f6f3299f3b035b4d1174e4d3d8b89f047e955f3c3e5
SSDEEP
6144:l2LUC37c9VnSlutqlny8TLwhwTUCTemf/oc8Gskdb78IRah+:U10mRTea2kdUIRv
Checks for missing Authenticode signature.
resource |
---|
97f538582d7c541dce072f9f0c7582d510281a09b8fc8fde1645af305d486452.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VirtualProtect
VirtualAlloc
Sleep
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
GetSystemInfo
GetWindowsDirectoryA
GetTickCount
IsDebuggerPresent
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetTempPathA
GetSystemTime
GetTempFileNameA
HeapCreate
HeapFree
SetLastError
WaitForMultipleObjects
ResumeThread
ExitThread
GetLastError
SetEvent
CloseHandle
CreateThread
HeapAlloc
CreateEventA
ReadConsoleW
ReadFile
SetEndOfFile
HeapReAlloc
HeapSize
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetStartupInfoW
LocalFree
RtlPcToFileHeader
EncodePointer
RaiseException
RtlUnwindEx
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetACP
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
CreateFileW
SetStdHandle
SetFilePointerEx
WriteConsoleW
CoUninitialize
CoInitializeEx
CoCreateInstance
CoInitializeSecurity
SysFreeString
SysAllocString
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ