Discussstep
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aff6cde451bf25e6d6b8292e3221618cb5842db61a74f6c23cafbd16cf875849.dll
Resource
win7-20220331-en
Target
aff6cde451bf25e6d6b8292e3221618cb5842db61a74f6c23cafbd16cf875849
Size
195KB
MD5
37f179fb4e176d979ebd8f9bc549fe2f
SHA1
4f8868091097895d059db293905925d8fcc199ea
SHA256
aff6cde451bf25e6d6b8292e3221618cb5842db61a74f6c23cafbd16cf875849
SHA512
100ff183acf53d34bd00a6469a8d4248d7f692fd05fe4724169b395903e85da5fe9fa43ed07c2612156b0ef6ad28249d321cdfccf57dff85872caa3e7284edef
SSDEEP
3072:R4pLbqFfaDFagr+oXJ+PIrDFasQCGyAB9LfIUQZpQqFXQ+RiDw4qSl1QSQl0J8k/:RqnqFosG+CXflFXQnES/QrC8
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualProtect
Sleep
OpenMutexA
GetEnvironmentVariableA
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
CloseHandle
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetTimeZoneInformation
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CompareStringW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
WTSCloseServer
WTSOpenServerA
WTSQueryUserToken
Discussstep
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ