DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fc955173d12189888dab8000d70662088882c8200184b6bb47c6ba6147dcef3f.dll
Resource
win7-20240903-en
Target
fc955173d12189888dab8000d70662088882c8200184b6bb47c6ba6147dcef3f
Size
127KB
MD5
4ba6950e2b098ab1145c65feb6e6a647
SHA1
ebf6173a8ab22fe44949f58d90346e3f23ca6ffd
SHA256
fc955173d12189888dab8000d70662088882c8200184b6bb47c6ba6147dcef3f
SHA512
60a25c3e589caf87f5a0867fd00ee8254f81923b54206b6797660c047bc90d47227d42acfcdaeb53d0ae2240133aa1769f0a1f04b39566583871606f830041cb
SSDEEP
3072:4/32y7nhiqesFJ0JCOtYo5KeF40tP8vJqY7vGxW:Ypn0qecMNYpem0tPEb7CW
Checks for missing Authenticode signature.
resource |
---|
fc955173d12189888dab8000d70662088882c8200184b6bb47c6ba6147dcef3f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
NdrCStdStubBuffer2_Release
VARIANT_UserFree
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserUnmarshal
__dllonexit
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
_encoded_null
_unlock
__clean_type_info_names_internal
memcmp
_malloc_crt
free
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE