NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
d49ad99e80c38f9c3f1dfb81166e17e0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d49ad99e80c38f9c3f1dfb81166e17e0N.dll
Resource
win10v2004-20240802-en
Target
d49ad99e80c38f9c3f1dfb81166e17e0N
Size
78KB
MD5
d49ad99e80c38f9c3f1dfb81166e17e0
SHA1
30511ac71bb36b72a3eebc422c54b47360cecd32
SHA256
f172cbd1b315de676c78da7a59c2af20d6c5097ffdfc3e96a44e45d4c7a59185
SHA512
1fdb698f289feb811616db94e37ff8b11b9ee04e6d7d994131f799858e90304728c9d1def28415a644f6c65e96f19b9b010268097143e7cf7f1e3520d81aea47
SSDEEP
1536:IAQigd0xSbnSwCnv10dbaOBSl6dR15UtM:DQJ+wCNIaOMl6dR15X
Checks for missing Authenticode signature.
resource |
---|
d49ad99e80c38f9c3f1dfb81166e17e0N |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
wnsprintfA
HttpQueryInfoA
HttpOpenRequestA
InternetGetConnectedState
HttpSendRequestA
InternetCrackUrlA
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
SleepEx
GetProcessHeap
WriteFile
TerminateThread
Sleep
CreateProcessA
GetProcAddress
FreeLibrary
CreateMutexA
ReleaseMutex
CloseHandle
GetTempPathA
LocalFree
CreateThread
GetVolumeInformationA
lstrcpyA
GetSystemTimeAsFileTime
lstrlenA
lstrcmpA
CreateFileA
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
LoadLibraryA
GetLastError
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
RtlUnwind
GetModuleHandleA
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
GetLengthSid
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
OpenProcessToken
RegOpenKeyA
ShellExecuteA
NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ