DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
tewv64.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
tewv64.dll
Resource
win10v2004-20240802-en
Target
tewv64.dll
Size
196KB
MD5
bc8332bcf3d8ba4cbe9165d038ff7517
SHA1
f52bbcbf76cd89432b017d0e6e9807193fe9918f
SHA256
9b3caa14ad6ec5178ece6fa79fec796099ce8cf06d6915406aa73c70842e667a
SHA512
a086d3105ed5eca320e15fb5689ffc1197c793e48b94d4cbfc6b2da46d8030ac7a5ff93d518e25ab491f6b409d3d1b5bc1f70426a3cb923ec33cb5eadd7a01c7
SSDEEP
6144:1nadj97z3a11O47bMbxwmkFiS0w+Tw+p+JVgoFPobLM:1ajVKPO47bMbxwmkFiS0w+Tw+p+JVgo4
Checks for missing Authenticode signature.
resource |
---|
tewv64.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryExW
GetModuleHandleW
LoadLibraryW
FreeLibrary
GetEnvironmentVariableW
CloseHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
HeapReAlloc
GetFileAttributesW
CreateFileW
lstrlenW
lstrcatW
lstrcpyW
lstrcmpiW
GetModuleFileNameW
GetLastError
OutputDebugStringW
OutputDebugStringA
WriteConsoleW
GetTempPathW
HeapSize
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
HeapAlloc
HeapFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetDC
ReleaseDC
GetClientRect
ClientToScreen
FindWindowExW
CopyRect
GetDeviceCaps
RegGetValueW
RegOpenKeyExW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
SHGetPathFromIDListW
RegisterDragDrop
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
RevokeDragDrop
SysAllocString
SysAllocStringLen
SysFreeString
VariantChangeType
VariantCopy
VariantClear
VariantInit
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
SysAllocStringByteLen
SysStringByteLen
ord219
PathAppendW
PathFindFileNameW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ