Discussstep
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8.dll
Resource
win7-20220311-en
Target
d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8
Size
195KB
MD5
141b5d7351136439cf47c73e1d7e7e1f
SHA1
ee5a21035a20702d1633f918613cb54440be4679
SHA256
d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8
SHA512
d9179c7e6a95391c55a418ccf8e67108e8e86e0eb959b8b1c232b8dc99978dce58c0db26d682a8ffdce300092ad223ca07f5ea04f1df0d30522096c4bf01668e
SSDEEP
3072:44pLbqFfaDFagr+oXJ+PIrDFasQCGyAB9LfIUQZpQqEXQ+RiDw4qSl1QSQl0J8k/:4qnqFosG+CXflEXQnES/QrC8
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualProtect
Sleep
OpenMutexA
GetEnvironmentVariableA
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
CloseHandle
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetTimeZoneInformation
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CompareStringW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
WTSCloseServer
WTSOpenServerA
WTSQueryUserToken
Discussstep
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ