DeinitServerExtension
InitServerExtension
_ReflectiveLoader@0
Static task
static1
Behavioral task
behavioral1
Sample
4361658e8abf834688f72220b5d806d209a3f2478e55553dad147f71cfe033a1.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4361658e8abf834688f72220b5d806d209a3f2478e55553dad147f71cfe033a1.dll
Resource
win10v2004-20240802-en
Target
4361658e8abf834688f72220b5d806d209a3f2478e55553dad147f71cfe033a1
Size
648KB
MD5
12225c1dfaeee484a891fa417d6d4b82
SHA1
e5f2f161d3aa9a38d03b1d01ac0562876b95b2b5
SHA256
4361658e8abf834688f72220b5d806d209a3f2478e55553dad147f71cfe033a1
SHA512
e845b4d8b1fccb7eb903b9536f22f64ef5ef9770f0a085cced80367c4ea83a1371dd70b169862f489459c67785d46389c28a7b5154ecf0c8a7abdb67025a5641
SSDEEP
6144:vl4VuvBya2u+3I8JO2pGaKu69u69u69u69um:vl5ya2u+3tA2p
Checks for missing Authenticode signature.
resource |
---|
4361658e8abf834688f72220b5d806d209a3f2478e55553dad147f71cfe033a1 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ntohl
htons
htonl
ReleaseSemaphore
CreateSemaphoreA
Sleep
WaitForSingleObject
InitializeCriticalSection
WaitForSingleObjectEx
TerminateThread
CreateThread
SetThreadPriority
GetCurrentProcess
GetCurrentThreadId
GetVersionExA
GetSystemInfo
CompareStringW
CreateFileA
CreateFileW
GetSystemDirectoryW
DeleteFileA
GetSystemDirectoryA
lstrcmpA
VirtualAlloc
VirtualFree
InterlockedDecrement
InterlockedIncrement
WaitForMultipleObjects
GetTickCount
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryW
FreeLibrary
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalReAlloc
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
VirtualProtect
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
IsValidLocale
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
SetEvent
DeviceIoControl
CreateEventA
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CloseHandle
CreateIoCompletionPort
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
PulseEvent
SetUnhandledExceptionFilter
ExitProcess
ExitThread
ResetEvent
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
CreateMutexA
ReleaseMutex
LoadLibraryA
ResumeThread
LocalAlloc
InterlockedExchange
RaiseException
GetCommandLineA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
HeapSize
GetLocaleInfoW
CreateServiceW
ChangeServiceConfigW
QueryServiceStatus
StartServiceW
OpenServiceW
UnlockServiceDatabase
LockServiceDatabase
CloseServiceHandle
OpenSCManagerW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
QueryServiceConfigW
DeinitServerExtension
InitServerExtension
_ReflectiveLoader@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ