DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6b6bb6742a2298e3847a392de059ac21e9b62ada5953f79f9d890ca0c8918fac.dll
Resource
win7-20240708-en
Target
6b6bb6742a2298e3847a392de059ac21e9b62ada5953f79f9d890ca0c8918fac
Size
124KB
MD5
88ac32f7b68880fa1ceddb08d17ffb9d
SHA1
a55f80de00e4bede52cd87a2aba81eff65e05e09
SHA256
6b6bb6742a2298e3847a392de059ac21e9b62ada5953f79f9d890ca0c8918fac
SHA512
a4fb0fba42675685a6d3a04e19f6322fede74e50f4b960801ee449616bb108b5ade214c8b93dd3f5ab11ce1302c10d57d942e951fba4ee8eb68e053ce5504860
SSDEEP
3072:n+f4nWlR0QO96i91yTw2lQBV+UdE+rECWp7hK7OJmWmPw:K4nWlRXOB914+BV+UdvrEFp7hK7o3
Checks for missing Authenticode signature.
resource |
---|
6b6bb6742a2298e3847a392de059ac21e9b62ada5953f79f9d890ca0c8918fac |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteObject
ReleaseStgMedium
DestroyMenu
CreatePopupMenu
MessageBoxW
LoadStringW
InsertMenuItemW
CharUpperW
LoadBitmapW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
DragFinish
DragQueryFileW
SHGetPathFromIDListW
_adjust_fdiv
_initterm
_onexit
__dllonexit
_except_handler3
memcmp
memset
rand
srand
free
malloc
wcscmp
wcsstr
_CxxThrowException
memmove
memcpy
__CxxFrameHandler
??1type_info@@UAE@XZ
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WaitForSingleObject
WaitForMultipleObjects
lstrlenW
EnterCriticalSection
ReadFile
GetFileSize
GetFileAttributesW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalLock
GetUserDefaultLangID
GetSystemDefaultLangID
InitializeCriticalSection
CreateProcessW
GetModuleHandleA
FindFirstFileW
FindClose
GetCurrentDirectoryW
SetLastError
GetModuleHandleW
GetProcAddress
CreateFileW
CloseHandle
FormatMessageW
LocalFree
GetModuleFileNameW
GetTickCount
GetLastError
MultiByteToWideChar
WideCharToMultiByte
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ