DllRegisterServer
UCTZiYGViyQbzVuGnbHyw
XxCcdtqp8iwfvW9NBN9MV
YNMYqnzadzJPXZ2zDkdRe
jEQ2uTHnv4apm8gHy2Lni
pxJTkgUAj6dSu6WgtZQt5
vzjazkhVDC4VWGpyrER9V
Static task
static1
Behavioral task
behavioral1
Sample
0d9c855ea4e5a0dfeac488a97846b8f780c5eb55a0e52fcdd0f0cee8bff70082.dll
Resource
win7-20241010-en
Target
0d9c855ea4e5a0dfeac488a97846b8f780c5eb55a0e52fcdd0f0cee8bff70082
Size
465KB
MD5
2ab59c44ed4b4dc4e8924ee34dabb02c
SHA1
0721952dabd2a56e58699d0214d0748cb3574a81
SHA256
0d9c855ea4e5a0dfeac488a97846b8f780c5eb55a0e52fcdd0f0cee8bff70082
SHA512
6af523418ccf865a692f8f7c81633273dc17a5c36cae40d42d7717b0b257763ffc0bcf152f7ae164fa37b75310b972b06c60c841fcd0939c8c7885a6f7094b50
SSDEEP
12288:uS4BnAed8BK2o0aIa5aoE0ZcKTME+ZvDV5ejhF0E3hobx:R4BnANK3a34dmyL0E3Q
Checks for missing Authenticode signature.
resource |
---|
0d9c855ea4e5a0dfeac488a97846b8f780c5eb55a0e52fcdd0f0cee8bff70082 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ExitProcess
VirtualAlloc
SetEndOfFile
CreateFileW
ReadConsoleW
WriteConsoleW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
GetLocaleInfoEx
MultiByteToWideChar
GetStringTypeW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
HeapFree
GetCommandLineA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
HeapSize
SetLastError
IsDebuggerPresent
GetProcessHeap
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
ReadFile
SetFilePointerEx
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
IsValidCodePage
GetACP
GetOEMCP
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
HeapReAlloc
SetFilePointer
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
SetStdHandle
CoTaskMemFree
CoTaskMemAlloc
CoLoadLibrary
DllRegisterServer
UCTZiYGViyQbzVuGnbHyw
XxCcdtqp8iwfvW9NBN9MV
YNMYqnzadzJPXZ2zDkdRe
jEQ2uTHnv4apm8gHy2Lni
pxJTkgUAj6dSu6WgtZQt5
vzjazkhVDC4VWGpyrER9V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ