DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e7a6b09bf3c6c993f771c0ecf0bfd33b3bde56413e384c7cea1986066ce9a5f.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0e7a6b09bf3c6c993f771c0ecf0bfd33b3bde56413e384c7cea1986066ce9a5f.dll
Resource
win10v2004-20240802-en
Target
0e7a6b09bf3c6c993f771c0ecf0bfd33b3bde56413e384c7cea1986066ce9a5f
Size
258KB
MD5
08c29bffa39fd25d640330d52d173f2a
SHA1
2aca3d41c4cfb412a612a8b8c50471b6b239bca7
SHA256
0e7a6b09bf3c6c993f771c0ecf0bfd33b3bde56413e384c7cea1986066ce9a5f
SHA512
1aca6f81038d72d8bddeabe75ca94d54549efc6096ec8131787d57aed08e948c5852fc6dd5a657cdd5ad86b54f00d94909729cf9ea59c51f0b7ffa9d4ed918c4
SSDEEP
3072:6AOaI/Bxcyv6ri9iHwBGd5d830jgI1bJp/HSU8giDT0L3XsL7S:ZA5xGdU+gI1ii3cL7S
Checks for missing Authenticode signature.
resource |
---|
0e7a6b09bf3c6c993f771c0ecf0bfd33b3bde56413e384c7cea1986066ce9a5f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Direct3DCreate9
DirectDrawCreateEx
DirectSoundEnumerateW
DirectSoundCaptureEnumerateW
CloseHandle
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
FormatMessageW
GetComputerNameW
GetDateFormatW
GetEnvironmentVariableW
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetSystemDirectoryW
GetTickCount
GetTimeFormatW
GetVersionExW
GetWindowsDirectoryW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
K32EnumProcessModules
K32EnumProcesses
K32GetModuleBaseNameW
LoadLibraryW
LoadResource
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
SizeofResource
lstrcmpW
_vsnprintf
CLSIDFromString
CoCreateInstance
CoTaskMemFree
PropVariantClear
StringFromGUID2
SysAllocString
SysFreeString
VariantInit
VariantClear
VariantCopy
VariantChangeType
SafeArrayAccessData
SafeArrayUnaccessData
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
_wcsicmp
_wcsnicmp
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcspn
strlen
wcschr
wcsrchr
wcsstr
EnumDisplayDevicesW
LoadStringW
wsprintfW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ