GetModVersion
load
Static task
static1
Behavioral task
behavioral1
Sample
e3fc547b5b584f998661300329cc99ecce37839fa5a644ea896f917592fa15b6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3fc547b5b584f998661300329cc99ecce37839fa5a644ea896f917592fa15b6.dll
Resource
win10v2004-20220812-en
Target
e3fc547b5b584f998661300329cc99ecce37839fa5a644ea896f917592fa15b6
Size
396KB
MD5
a8388b5bf5a56841dbae17bc46235c74
SHA1
4fc3981042ac0ff91548f4559016178f014cfcbb
SHA256
e3fc547b5b584f998661300329cc99ecce37839fa5a644ea896f917592fa15b6
SHA512
b5eb178050396e7cf4a80b95ff74f563b3ac63333212029d288faafc7ec7e9c7b01f3c216a4c4f999b01468927f660e887de643a0e13c41fa75475228e0904aa
SSDEEP
6144:ubDSEdmw8OwvEkOYpY/yOezmRmRleiPp4Nb5:WDSEdzX5WY6WYpS
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord561
ord815
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord825
ord540
ord800
ord823
ord269
ord1116
_vsnprintf
tolower
_strnicmp
swprintf
__CxxFrameHandler
free
_CxxThrowException
realloc
malloc
sprintf
_wcsicmp
wcsstr
wcsncmp
wcscmp
wcsncpy
atoi
wcslen
toupper
_wcsnicmp
_wtol
_mbsrchr
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
exit
_stricmp
_ftol
strncmp
strtod
printf
GetModuleHandleW
GetProcAddress
DeleteFileA
WriteFile
SetEndOfFile
CreateFileA
GetFileSize
ReadFile
InterlockedCompareExchange
CloseHandle
VirtualQuery
VirtualProtect
GetCurrentProcess
GetLocalTime
lstrlenA
lstrcpyA
LocalFree
WinExec
GetModuleFileNameA
lstrcpynA
lstrcatA
MultiByteToWideChar
GetVersionExA
GlobalFree
WriteProcessMemory
ReadProcessMemory
GetWindowsDirectoryA
GetSystemInfo
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
SetFilePointer
LocalAlloc
FatalAppExitA
SetUnhandledExceptionFilter
CreateThread
lstrcatW
GetPrivateProfileStringW
GetPrivateProfileIntW
MoveFileExA
FreeLibrary
LoadLibraryA
IsBadReadPtr
WideCharToMultiByte
GetLastError
GetModuleHandleA
GetWindowTextA
LoadImageA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
PathFindFileNameA
PathRemoveFileSpecA
PathFileExistsA
PathCombineA
PathFileExistsW
WinHttpReadData
WinHttpQueryHeaders
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetTimeouts
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpCrackUrl
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpWriteData
WinHttpCloseHandle
SymFromAddr
SymGetLineFromAddr
SymInitialize
SymCleanup
SymGetOptions
ImageNtHeader
ImageDirectoryEntryToData
SymGetModuleBase
SymFunctionTableAccess
StackWalk
SymGetModuleInfo
SymSetOptions
MiniDumpWriteDump
GetModVersion
load
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ