AddIn_FileTime
AddIn_SystemTime
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
438d6a9ab7ad07e03b4163f4d24d66e4becb79b2c709e7fd84af74d8da7b000b.dll
Resource
win7-20240903-en
Target
438d6a9ab7ad07e03b4163f4d24d66e4becb79b2c709e7fd84af74d8da7b000b
Size
362KB
MD5
971d61898a89ea5c703cd251dc0cd1d5
SHA1
c1f241cf9cd01250c645a10a713b7f0810572322
SHA256
438d6a9ab7ad07e03b4163f4d24d66e4becb79b2c709e7fd84af74d8da7b000b
SHA512
881d49d10ffe85245f4a8ef1381059aff7ddf30cd62d30a1a070cd785fec1a900d09b768fc48025501c3ef837c54740cfd15d15c53c6d58f2c43246cfeaed608
SSDEEP
6144:hlNuuXQASByX79xoJcXy16qFHJ7wwD1w3pq6jTK/V9OT0u:hlNu9ASByX7fy/BJ7rGTK/V3
Checks for missing Authenticode signature.
Processes:
resource |
---|
438d6a9ab7ad07e03b4163f4d24d66e4becb79b2c709e7fd84af74d8da7b000b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetTimeFormatA
GetDateFormatA
GetThreadLocale
FileTimeToSystemTime
VirtualAlloc
ExitProcess
CloseHandle
CreateFileW
SetStdHandle
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EncodePointer
FlsGetValue
FlsAlloc
FlsFree
SetLastError
GetLastError
HeapSize
HeapValidate
IsBadReadPtr
DecodePointer
GetProcAddress
GetModuleHandleW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapAlloc
GetModuleFileNameW
HeapReAlloc
HeapQueryInformation
HeapFree
WriteFile
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
RaiseException
RtlPcToFileHeader
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
MessageBoxA
CoTaskMemFree
CoTaskMemAlloc
CoLoadLibrary
AddIn_FileTime
AddIn_SystemTime
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ