DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1bb977cfded232ce4f67ec677f5be9f11cc54486bcc48b05d8fb3ad0e526c398N.dll
Resource
win7-20240729-en
Target
1bb977cfded232ce4f67ec677f5be9f11cc54486bcc48b05d8fb3ad0e526c398N
Size
2.2MB
MD5
d89699e1a658e4f4a0947328117e8800
SHA1
c50f115c465f833d25fb44038ff3fa9be61ed0c1
SHA256
1bb977cfded232ce4f67ec677f5be9f11cc54486bcc48b05d8fb3ad0e526c398
SHA512
25b6e342cec883ea82fb22480660b5e0249654ccfd335342bda7f93d497ca58639d5a4844c9d30cec169a995fb0c671ee91f8f9175627687a288d2e70e6ee39b
SSDEEP
24576:jbzqx2Bvpb8LDqd6WpR3RnkicyGoJdKU+lbGXYjH36w/Kcjf4IU/bFuW10Y56yIg:Plxbq4eojKDzKcr4IWn00WTPEe5k
Checks for missing Authenticode signature.
resource |
---|
1bb977cfded232ce4f67ec677f5be9f11cc54486bcc48b05d8fb3ad0e526c398N |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
ExitThread
LoadLibraryW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
DeleteCriticalSection
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapCreate
HeapDestroy
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
GetFullPathNameW
GetLocaleInfoA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
CreateFileW
CreateThread
IsWindow
SysStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString
UrlMkSetSessionOption
SHGetFileInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ