COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
28ef02ac7c44e7c335ac6f1e39af86d68b8b95d7f58c5d7b8b4b3db6994d8cce.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28ef02ac7c44e7c335ac6f1e39af86d68b8b95d7f58c5d7b8b4b3db6994d8cce.dll
Resource
win10v2004-20220812-en
Target
28ef02ac7c44e7c335ac6f1e39af86d68b8b95d7f58c5d7b8b4b3db6994d8cce
Size
33KB
MD5
43520d1b7c4e8ff9031c9e3defca38a3
SHA1
1aac484be534cf97f2653d050b1fbc03f32f0917
SHA256
28ef02ac7c44e7c335ac6f1e39af86d68b8b95d7f58c5d7b8b4b3db6994d8cce
SHA512
64ecf24d613a2e889698dc096dfd2b35d7f26fdc97e5a07119b2e2b1648e58efa28837763bed7985c98c60fa45be9605c7bff92de3fead4e98b7ff3a21421af9
SSDEEP
768:GPC39bq5oxE2AdR40kYO2lg7EW1DdgI5hqDMTR5b+X:GPwgAEw0kY87EWddgWk+Rd+X
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateThread
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
SetFileAttributesA
GetCommandLineA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetModuleHandleA
Sleep
ExitProcess
GetCurrentDirectoryA
GetPrivateProfileStringA
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CallWindowProcA
wsprintfA
GetDesktopWindow
GetDC
GetWindowRect
ReleaseDC
GetParent
GetWindowThreadProcessId
EnumWindows
GetWindowTextA
GetClientRect
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GdiplusShutdown
GdipDisposeImage
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
GdipLoadImageFromFile
GdipSaveImageToFile
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
connect
htons
gethostbyname
socket
recv
inet_ntoa
send
WSAStartup
WSACleanup
inet_addr
closesocket
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
strrchr
_access
strchr
strstr
abs
malloc
wcscmp
memcpy
__CxxFrameHandler
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
memcmp
atoi
strlen
sprintf
strncpy
??2@YAPAXI@Z
memset
strcat
strcpy
strcmp
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ