DllInstall
__apicall
_init
_uninstall
serv
Static task
static1
Behavioral task
behavioral1
Sample
f72c201c2d2bff7154b7b5a0a3f7df21033763d9f8ed620795a0d652dbcd1213N.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f72c201c2d2bff7154b7b5a0a3f7df21033763d9f8ed620795a0d652dbcd1213N.dll
Resource
win10v2004-20241007-en
Target
f72c201c2d2bff7154b7b5a0a3f7df21033763d9f8ed620795a0d652dbcd1213N
Size
1.6MB
MD5
28f4a751a06507ed1272f50892fc5a10
SHA1
f72975e392e16fcf2869ddeb6536712ba51268a4
SHA256
f72c201c2d2bff7154b7b5a0a3f7df21033763d9f8ed620795a0d652dbcd1213
SHA512
ef608d9bf411144734ec58fd3f76070050095de07787ff2e3728fc1b1ca84e3b30fd7cf347de920cc40b47df59ad43a25d19ebbc4d554ba2ba73349b40ca8ce2
SSDEEP
49152:FEKreWv+lfP29JiFWiR98UueXW+V9XuaXw:FE8+o4R98KV9+a
Checks for missing Authenticode signature.
resource |
---|
f72c201c2d2bff7154b7b5a0a3f7df21033763d9f8ed620795a0d652dbcd1213N |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
VirtualFree
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
GetLastError
GetTickCount
GetProcAddress
GetModuleHandleA
Sleep
GetModuleFileNameW
GetTempPathW
GetEnvironmentVariableW
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
InterlockedDecrement
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
WriteFile
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
SetLastError
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
RtlUnwind
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
DllInstall
__apicall
_init
_uninstall
serv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ