DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2c31cf8ec8c47b1d4502a4704f09eb49cc431edc0654dacf11856fc8628a0cbf.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c31cf8ec8c47b1d4502a4704f09eb49cc431edc0654dacf11856fc8628a0cbf.dll
Resource
win10v2004-20241007-en
Target
2c31cf8ec8c47b1d4502a4704f09eb49cc431edc0654dacf11856fc8628a0cbf
Size
666KB
MD5
5a515c633cd01c778a35747b64a52de4
SHA1
0d292d7949463787043e9e4fb4bc2f77945fbdc8
SHA256
2c31cf8ec8c47b1d4502a4704f09eb49cc431edc0654dacf11856fc8628a0cbf
SHA512
a35d5053b117022acac123f44087be5a280b657d04785786eac14b68a594e3eece4af7ea87ba106bcdf83d738030d1010231b85f5475a77e53b91c19649d4c0f
SSDEEP
12288:JDwfb0Ru2iNr5R+vHh0PxyrEj2d69ZNPUnfn1N:pwfgMpmvEj2dAqf1N
Checks for missing Authenticode signature.
Processes:
resource |
---|
2c31cf8ec8c47b1d4502a4704f09eb49cc431edc0654dacf11856fc8628a0cbf |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetFileSize
GetFileTime
SetEndOfFile
SetFilePointer
GetProcAddress
ReadFile
FlushFileBuffers
GetTempPathA
GetTempFileNameA
MoveFileA
DeleteFileA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
MultiByteToWideChar
InterlockedExchange
DeleteFileW
GetTimeZoneInformation
GetEnvironmentVariableA
IsValidLocale
FormatMessageW
LocalAlloc
CloseHandle
FreeLibrary
WriteFile
GetVersionExA
FormatMessageA
LoadLibraryW
GetSystemDefaultLangID
GetSystemDefaultLCID
GetUserDefaultLCID
FindFirstFileW
FindNextFileW
FindClose
LoadLibraryExW
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
InterlockedCompareExchange
LoadLibraryExA
GetCPInfo
WideCharToMultiByte
CreateFileA
CreateFileW
TlsFree
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleFileNameW
GetLastError
Sleep
??3@YAXPAX@Z
strncmp
free
__CxxFrameHandler
??2@YAPAXI@Z
_purecall
_except_handler3
_initterm
_adjust_fdiv
_CxxThrowException
wcslen
wcsncpy
_vsnwprintf
_wcsnicmp
_wcsicmp
_wtoi
wcscmp
wcsstr
qsort
bsearch
wcsncmp
wcstol
??1type_info@@UAE@XZ
wcsrchr
wcstok
_wtol
wcschr
_wcslwr
iswspace
ceil
_stricmp
?terminate@@YAXXZ
floor
realloc
malloc
_onexit
__dllonexit
UrlCombineW
URLOpenBlockingStreamW
LoadStringA
LoadStringW
RegQueryValueExW
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExW
CLSIDFromProgID
StringFromGUID2
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoCreateGuid
CoTaskMemFree
StringFromCLSID
CLSIDFromString
VariantTimeToSystemTime
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
VarDateFromStr
SafeArrayCreate
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetRecordInfo
SafeArrayGetElement
GetRecordInfoFromGuids
SafeArrayRedim
SafeArrayPutElement
SafeArrayCreateEx
SystemTimeToVariantTime
SysStringByteLen
SafeArrayGetElemsize
SafeArrayCreateVector
SysAllocStringByteLen
VarDecCmp
VarDecFromI4
VarDecFromStr
SafeArrayCopy
SafeArrayCopyData
SafeArrayDestroy
VariantCopy
VariantChangeTypeEx
VariantChangeType
LoadRegTypeLi
GetErrorInfo
SetErrorInfo
SysStringLen
SysAllocStringLen
LoadTypeLibEx
UnRegisterTypeLi
VariantClear
VariantInit
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE