DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule
Static task
static1
Behavioral task
behavioral1
Sample
bcfaaacfb15ed5b64bd634fd0186b897ac462093bb9582b27b9ad284bb5f8895.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bcfaaacfb15ed5b64bd634fd0186b897ac462093bb9582b27b9ad284bb5f8895.dll
Resource
win10v2004-20220901-en
Target
bcfaaacfb15ed5b64bd634fd0186b897ac462093bb9582b27b9ad284bb5f8895
Size
220KB
MD5
086002352d2e8379d4370eb2760e3da0
SHA1
f0817c33b7a5f570d117105826d58f9aff6ed8a8
SHA256
bcfaaacfb15ed5b64bd634fd0186b897ac462093bb9582b27b9ad284bb5f8895
SHA512
2f4d76114a391fbd282ccefca416b2dbc74b92ec84c0fb3dac1a42ab9324e997b30ed1f26ad4957177260883ad446a8e0517285a39ecedf476dc2b08e73974b4
SSDEEP
6144:Ok2nKcu8VQPJ6SeTQySApf9tBDeZrU8ZjQ:OvnFuTovQKleFU8
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
setlocale
wcschr
_mbsnextc
_wcsicmp
towlower
_ultoa
strtoul
_mbsnbicmp
_mbsstr
sprintf
_ismbcdigit
sscanf
_except_handler3
strchr
_ismbcalpha
atoi
_mbslen
_mbsnicmp
__lconv_init
_adjust_fdiv
malloc
_initterm
free
_mbsdec
_ismbblead
_mbsinc
_mbsrchr
_mbschr
memmove
iswctype
_ismbcspace
_mbsncmp
wcscspn
wcslen
_mbsicmp
FindResourceA
LoadResource
CloseHandle
HeapFree
GetCurrentProcess
GetACP
GetVersion
GetFileAttributesA
LoadLibraryA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetProcAddress
GetSystemDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
ReadFile
GetDiskFreeSpaceA
GetModuleHandleA
GetPrivateProfileStringA
GetLastError
FreeLibrary
DeleteFileA
GetExitCodeProcess
WaitForSingleObject
LockResource
SizeofResource
FreeResource
UpdateResourceA
EndUpdateResourceA
GetTempPathA
BeginUpdateResourceA
SetLastError
CreateFileA
LoadLibraryExA
EnumResourceNamesA
CopyFileA
SetFileAttributesA
SearchPathA
SetErrorMode
FindFirstFileA
FindClose
FormatMessageA
LocalFree
IsDBCSLeadByte
HeapReAlloc
HeapAlloc
ExitProcess
DebugBreak
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetVersionExA
InitializeCriticalSection
CreateProcessA
CreateEventA
SetFilePointer
CreateDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GetFileSize
FindNextFileA
RemoveDirectoryA
CharLowerA
wsprintfA
CharLowerBuffA
CharLowerW
MessageBoxA
RegQueryValueExA
GetUserNameA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegCloseKey
RegOpenKeyExA
RegEnumKeyA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
CoInitialize
CoUninitialize
LogIfA
LogBegin
LogA
LogEnd
LogReInitA
IsmEnumFirstDestinationObjectEx
IsmIsObjectAbandonedOnCollision
IsmSetOperationOnObjectId
IsmFilterObject
IsmIsApplyObjectId
IsmRegisterProgressSlice
IsmGetObjectsStatistics
IsmClearApplyOnObject
IsmIsComponentSelected
TrackedIsmGetMemory
IsmIsObjectHandleNodeOnly
IsmSetEnvironmentFlag
IsmGetPropertyData
IsmGetPropertyFromObject
IsmRegisterOperationApplyCallback
IsmRegisterOperationFilterCallback
IsmRegisterGlobalFilterCallback
IsmRegisterGlobalApplyCallback
IsmReplacePhysicalObject
IsmParsedPatternMatch
IsmRegisterRestoreCallback
IsmGetOsVersionInfo
TrackedIsmDuplicateString
IsmSelectPreferredAlias
IsmAddComponentAlias
IsmDoesObjectExist
IsmDeleteEnvironmentVariable
IsmRegisterPhysicalAcquireHook
IsmAddToPhysicalEnum
IsmProhibitPhysicalEnum
IsmClearOperationOnObject
IsmGetCurrentSidString
IsmGetTempDirectory
IsmAbortObjectEnum
TrackedIsmGetNativeObjectName
IsmExecuteFunction
IsmConvertMultiSzToObject
IsmGetEnvironmentMultiSz
IsmSendMessageToApp
IsmCreateUser
IsmGetMappedUserData
IsmGetEnvironmentString
IsmMakeApplyObjectId
IsmSetOperationOnObjectId2
IsmIsAttributeSetOnObjectId
IsmMakePersistentObjectId
IsmSetAttributeOnObjectId
IsmMakePersistentObject
IsmAddPropertyToObject
IsmSetOperationOnObject
IsmMakeApplyObject
TrackedIsmExpandEnvironmentString
IsmReleaseMemory
IsmGetObjectIdFromName
IsmClearPersistenceOnObject
IsmEnumFirstSourceObjectEx
IsmEnumNextObject
IsmSetAttributeOnObject
IsmClearAbandonObjectOnCollision
IsmAbandonObjectOnCollision
IsmRegisterOperationData
IsmAppendEnvironmentString
IsmRegisterTypePostEnumerationCallback
IsmRegisterOperation
IsmRegisterProperty
IsmGetEnvironmentValue
IsmEnumFirstComponent
IsmAbortComponentEnum
IsmEnumNextComponent
TrackedIsmCreateSimpleObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
IsmDestroyObjectString
IsmTickProgressBar
IsmHookEnumeration
IsmIsObjectHandleLeafOnly
TrackedIsmCreateObjectPattern
IsmQueueEnumeration
IsmGetTransportVariable
IsmIsEnvironmentFlagSet
IsmSetCancel
IsmSetEnvironmentString
IsmSetTransportVariable
TrackedIsmCreateObjectHandle
IsmAcquireObjectEx
IsmReleaseObject
IsmDestroyObjectHandle
IsmRegisterAttribute
IsmGetObjectTypeId
IsmGetRealPlatform
TrackedIsmGetLongName
UuidFromStringA
UuidToStringA
RpcStringFreeA
UuidCreate
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
SetupGetIntField
SetupGetMultiSzFieldA
SetupGetLineTextA
SetupFindFirstLineA
SetupGetStringFieldA
SetupFindNextLine
SetupCloseInfFile
SetupOpenInfFileA
SetupOpenAppendInfFileA
DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE