PluginRegisterCallbacks
VncStartServer
VncStopServer
Static task
static1
Behavioral task
behavioral1
Sample
13a40000.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13a40000.dll
Resource
win10v2004-20220812-en
Target
13a40000.dll.exe
Size
377KB
MD5
b9136f251831254677124ff2f4b4ced9
SHA1
f009650a2b57ae71db62e4e5498e80b7b19f5451
SHA256
fa57cb2f245a87a11f4fc97f2c4f3775e2e2515c6e4df950f0d86933e1793aaf
SHA512
a6c9c91887030e3ed9c5a7f00573279fcd74b9c081e8b8e8080074c8e55c672f81a732529a35c8067d5b04f40e034147295a5ada46de90834abc06c4fe69468c
SSDEEP
6144:sP5ukahaLVnNM45QV3JUtB0aFNmz1lZu+jo/ipJr2vlsJ8CkmAuZ5PJu0EtX:sP5ukahaNNLiBaFNmz1lZxjSiXrwsHpg
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_strnicmp
memcmp
memset
_strupr
strcpy
ZwQueryInformationProcess
ZwQueryKey
NtSuspendProcess
NtSetContextThread
RtlNtStatusToDosError
NtResumeProcess
NtGetContextThread
_wcsnicmp
LdrFindEntryForAddress
NtMapViewOfSection
NtUnmapViewOfSection
ZwClose
NtCreateSection
memmove
NtQuerySystemInformation
RtlInitUnicodeString
NtQueryInformationFile
NtQueryInformationProcess
NtQueryDirectoryFile
NtQueryObject
ZwOpenProcessToken
ZwOpenProcess
ZwQueryInformationToken
RtlEqualUnicodeString
NtSetInformationProcess
_snprintf
memcpy
__chkstk
__C_specific_handler
VirtualFree
RaiseException
CreateIoCompletionPort
PostQueuedCompletionStatus
GetSystemInfo
GetQueuedCompletionStatus
CreateWaitableTimerA
OpenThread
ResetEvent
HeapReAlloc
RemoveVectoredExceptionHandler
HeapAlloc
HeapFree
SetEvent
CreateEventA
HeapDestroy
HeapCreate
GetLastError
LocalAlloc
AddVectoredExceptionHandler
GetCurrentThreadId
GetVersion
LocalFree
GetSystemTime
SwitchToThread
lstrlenA
WideCharToMultiByte
lstrcatA
MultiByteToWideChar
lstrlenW
SetLastError
lstrcmpiW
lstrcatW
lstrcpyW
lstrcpyA
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
DeleteCriticalSection
CloseHandle
CreateThread
GetComputerNameW
CreateMutexA
GetCurrentProcessId
lstrcpynA
lstrcpynW
lstrcmpiA
SetEnvironmentVariableW
SetErrorMode
SetUnhandledExceptionFilter
OpenProcess
Sleep
TerminateProcess
GetProcAddress
WaitForMultipleObjects
LoadLibraryA
CreateDirectoryW
ReleaseMutex
GlobalDeleteAtom
GlobalAddAtomA
IsBadReadPtr
IsBadStringPtrA
CreateFileA
SetFilePointer
SetEndOfFile
ExpandEnvironmentStringsA
WriteFile
FreeLibrary
lstrcmpA
VirtualQuery
GetCurrentProcess
VirtualProtect
ExpandEnvironmentStringsW
GetVersionExW
GetFileSize
ReadFile
CreateFileW
GetTempPathW
GetLongPathNameW
WaitForSingleObjectEx
ReadProcessMemory
VirtualAlloc
VirtualAllocEx
GetModuleFileNameA
WriteProcessMemory
GetThreadContext
VirtualProtectEx
SuspendThread
ResumeThread
CopyFileW
GetFileAttributesExW
FindFirstFileW
CompareFileTime
lstrcmpW
FindClose
FindNextFileW
GetEnvironmentVariableW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
OpenEventA
GetSystemWindowsDirectoryA
SetFilePointerEx
GetFileInformationByHandleEx
SetFileInformationByHandle
GetProcessId
RemoveDirectoryW
DuplicateHandle
DeleteFileW
MulDiv
GetTickCount
GetSystemTimeAsFileTime
GetProcessTimes
GetLocaleInfoW
VerLanguageNameW
SetWaitableTimer
CancelWaitableTimer
SystemTimeToFileTime
AcceptEx
GetAcceptExSockaddrs
PluginRegisterCallbacks
VncStartServer
VncStopServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ