DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
74f3c19e47079cfbcb58719059d815eaefb05df060242a57634498baf9512211N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
74f3c19e47079cfbcb58719059d815eaefb05df060242a57634498baf9512211N.dll
Resource
win10v2004-20240802-en
Target
74f3c19e47079cfbcb58719059d815eaefb05df060242a57634498baf9512211N
Size
211KB
MD5
cf767d22d9babda95c33915a3ae6aa40
SHA1
b01cfb658d90854e588cbb9d5528bb65ce58002f
SHA256
74f3c19e47079cfbcb58719059d815eaefb05df060242a57634498baf9512211
SHA512
a59682b6222217638db9df30a315487b49f3eed8a94625fe74aa097f4fdf9e97667f9157e4dd858842857c9f9b9f85245a6c7a0bf7faddeb5c75e96f5b391a33
SSDEEP
3072:78WGyzUpGeiklU7v6Fr3yUSNSC+haxLFuju6Kpe2qJEX:JGyUlUsrCUSNSLpy7pX
Checks for missing Authenticode signature.
resource |
---|
74f3c19e47079cfbcb58719059d815eaefb05df060242a57634498baf9512211N |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameW
LocalAlloc
LocalFree
OpenProcess
TerminateProcess
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
GetSystemInfo
GetCurrentProcessId
CreateThread
Sleep
GetPrivateProfileStringW
InterlockedIncrement
InterlockedDecrement
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadResource
SizeofResource
lstrcmpiW
LoadLibraryExW
GetModuleFileNameA
GetModuleHandleW
FindResourceW
GetPrivateProfileIntW
WritePrivateProfileStringW
EncodePointer
DecodePointer
GetThreadLocale
SetThreadLocale
FindNextFileW
FindFirstFileW
CreateFileW
CloseHandle
FindClose
WriteFile
FreeLibrary
GetLastError
LoadLibraryW
GetCurrentProcess
GetProcAddress
GetVersionExW
WriteConsoleW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetTimeZoneInformation
GetACP
GetConsoleMode
GetConsoleCP
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
IsDebuggerPresent
OutputDebugStringW
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
CharNextW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
LookupAccountSidW
GetTokenInformation
OpenProcessToken
SHGetSpecialFolderPathW
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
SysFreeString
SysStringLen
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysAllocString
RegisterTypeLi
UnRegisterTypeLi
StrStrIA
PathFileExistsW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ