DllRegisterServer
TOcSc9898M
TRoMqVC7r
UDOysR
WXbba298N
Static task
static1
Behavioral task
behavioral1
Sample
_KGM.dll
Resource
win7-20220812-en
Target
_KGM.dll
Size
440KB
MD5
c6ad59f1f0d4e90d5b3f222d175d6d1e
SHA1
992a2036bb2c7dd865cdcedeef33d8303c48ee75
SHA256
c98b8a97cd14554cf1f47562921122f1c1624ed5f9f3603847d0e16103b798d5
SHA512
a7c9931f7e2bdf790a958b8e4c5e1285553cfbcee088736f6f02209854c685ec2818a8f7794a6d581abaf61ff88967376691afc04317bea05f496845b26310ed
SSDEEP
12288:nDFhSg4nkx/LMw27kcmgexU51plXKixdvKXsmR:nD3S1T6YhxlNqf
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
SetFilePointer
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
ExitProcess
CreateThread
GetCurrentThread
OpenThread
VirtualAlloc
GetProcAddress
SwitchToFiber
CreateFiber
LoadLibraryA
CallNamedPipeA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
CompareStringW
LCMapStringW
FindFirstFileExA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
DecodePointer
RaiseException
CreateFileW
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DllRegisterServer
TOcSc9898M
TRoMqVC7r
UDOysR
WXbba298N
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ