DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
Static task
static1
Behavioral task
behavioral1
Sample
64255ff02e774588995b203d556c9fa9e2c22a978aec02ff7dea372983b47d38.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
64255ff02e774588995b203d556c9fa9e2c22a978aec02ff7dea372983b47d38.dll
Resource
win10v2004-20220414-en
Target
64255ff02e774588995b203d556c9fa9e2c22a978aec02ff7dea372983b47d38
Size
24KB
MD5
ef62f2b7c05210471d56b8bee8072d2e
SHA1
c71ad39f0551a334c7f27261b660f2b54db097ac
SHA256
64255ff02e774588995b203d556c9fa9e2c22a978aec02ff7dea372983b47d38
SHA512
2d94544401b6319ccad26df71c529c914804b021c5e64055da84e6b68c07e1f48a99578c231562408704e178f353118877f648aed721627dfd457ed07c2fee2a
SSDEEP
384:RpWPvA1Malq+fy0iI43xc/OuM55qPKBSBUvbPljy/mmkezrvplI:HzlJySsxc9MePKBSByzQmmkefvfI
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GlobalAlloc
lstrcmpiA
GlobalMemoryStatus
GlobalFree
GetComputerNameA
VirtualAlloc
ExitProcess
FreeConsole
CreateFileA
GetFileSize
GetModuleFileNameA
lstrcpyA
LocalAlloc
LocalFree
GetCurrentThreadId
SetProcessShutdownParameters
CreateToolhelp32Snapshot
OpenProcess
Process32Next
LoadLibraryA
GetProcAddress
lstrlenA
SetLastError
Sleep
MoveFileA
DeleteFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
FindNextFileA
FindClose
GetLogicalDriveStringsA
GetDriveTypeA
CreatePipe
GetSystemDirectoryA
CopyFileA
CreateProcessA
ReadFile
CloseHandle
CreateThread
WaitForSingleObject
WriteFile
GetTickCount
GetVersionExA
DefWindowProcA
CreateWindowExA
DispatchMessageA
TranslateMessage
PeekMessageA
CloseDesktop
GetUserObjectInformationA
OpenInputDesktop
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
CloseWindowStation
PostMessageA
SetCursorPos
keybd_event
mouse_event
GetCursorInfo
DrawIconEx
GetSystemMetrics
wsprintfA
RegisterClassExA
LoadCursorA
SelectObject
GetDIBits
CreateCompatibleDC
CreateDCA
DeleteDC
CreateCompatibleBitmap
StretchBlt
DeleteObject
OpenServiceA
ChangeServiceConfigA
StartServiceA
CloseServiceHandle
QueryServiceStatus
GetUserNameA
GetTokenInformation
LookupAccountSidA
DuplicateTokenEx
SetServiceStatus
RegisterServiceCtrlHandlerA
LogonUserA
CreateProcessAsUserA
OpenSCManagerA
ControlService
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
CreateServiceA
OpenProcessToken
FreeSid
SetFileSecurityA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
AllocateAndInitializeSid
ShellExecuteA
StrStrIA
SHGetSpecialFolderPathA
SHGetFileInfoA
strcspn
rand
??2@YAPAXI@Z
strncpy
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
atol
_local_unwind2
malloc
free
_ftol
??3@YAXPAX@Z
strstr
sprintf
atoi
_except_handler3
_CxxThrowException
__CxxFrameHandler
srand
htons
setsockopt
shutdown
socket
WSACleanup
recv
send
gethostbyname
inet_addr
connect
WSAStartup
closesocket
WTSEnumerateSessionsA
WTSFreeMemory
WTSQuerySessionInformationA
DestroyEnvironmentBlock
CreateEnvironmentBlock
NetUserDel
NetLocalGroupAddMembers
NetUserAdd
DiUninstallDevice
ServiceMain
UpdateDriverForPlugAndPlayDevicesW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ