DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b11b098bca7cf0d897de8a692b41952a33d3bacd178d5a4d8457cf837479a6e2.dll
Resource
win7-20240903-en
Target
b11b098bca7cf0d897de8a692b41952a33d3bacd178d5a4d8457cf837479a6e2
Size
364KB
MD5
83a30d276514bb13640148ebcb136b3f
SHA1
103ef8f87335484b9c94e140ff389f7aff04105b
SHA256
b11b098bca7cf0d897de8a692b41952a33d3bacd178d5a4d8457cf837479a6e2
SHA512
adedccf5809d74d8c4aeeeb37fc76e1a5e636321f83928965f6dc245f53e41f45b0b02c190d85d332aefc4f3f28c3269178520162ccbf3659a54daa2f288e45f
SSDEEP
6144:FWng1PL0ietZBDMT025JD+dc584xDlwnBV+UdvrEFp7hKGE:FWngJLS3MT025JD+o8CSBjvrEH7TE
Checks for missing Authenticode signature.
resource |
---|
b11b098bca7cf0d897de8a692b41952a33d3bacd178d5a4d8457cf837479a6e2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindResourceA
LoadResource
FreeLibrary
FreeResource
LockResource
lstrcpyA
lstrcatA
lstrlenA
GetModuleFileNameA
InterlockedDecrement
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetEnvironmentStrings
GetStartupInfoA
GetTempPathA
GetTempFileNameA
RtlUnwind
GetLastError
WideCharToMultiByte
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedIncrement
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetStdHandle
GetEnvironmentStringsW
WriteFile
CloseHandle
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringW
FlushFileBuffers
CreateFileA
MultiByteToWideChar
LCMapStringA
GetStringTypeA
GetStringTypeW
SetFilePointer
SetEndOfFile
ReadFile
wsprintfA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
CoInitialize
CoGetClassObject
StringFromCLSID
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ