?PullInMyLibrary@@YAHXZ
DeleteIOModule
DoTest
GetIOModule
Static task
static1
Behavioral task
behavioral1
Sample
1ea202d3a88eb6e890ffc276c2cc7b190fc519b94c762496f73e4b2103b4df8f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ea202d3a88eb6e890ffc276c2cc7b190fc519b94c762496f73e4b2103b4df8f.dll
Resource
win10v2004-20220901-en
Target
1ea202d3a88eb6e890ffc276c2cc7b190fc519b94c762496f73e4b2103b4df8f
Size
530KB
MD5
022512c9f3b33aaa9e776e20a2990b00
SHA1
1b7709011244886129a5e6594bece699391570a0
SHA256
1ea202d3a88eb6e890ffc276c2cc7b190fc519b94c762496f73e4b2103b4df8f
SHA512
6adaf54d5c8fb3d7607837bb67eccb7048688adce2a00526571d95bd481ff07148b0033cd17f63cc4a2bb7121d9a9aef26681ac88dc05f851e5250e7f5f06650
SSDEEP
12288:xzDKxiFUiJ9YR8wr+W7h1Y0/9A0/+gngliDadYSas:MkbIr/eGsiD6das
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_FreeImage_GetHeight@4
_FreeImage_CloseMemory@4
_FreeImage_GetFileTypeFromMemory@8
_FreeImage_GetWidth@4
_FreeImage_Unload@4
_FreeImage_Rescale@16
_FreeImage_OpenMemory@8
_FreeImage_LoadFromMemory@12
_FreeImage_ConvertToRawBits@32
?Hfclose@VFS@@YAHPAVIFile@1@@Z
?FileExist@VFS@@YA_NPBD@Z
?InitVFS@VFS@@YAH_N@Z
?Hfread@VFS@@YAIPAXIIPAVIFile@1@@Z
?Hfopen@VFS@@YAPAVIFile@1@PBD00@Z
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileAttributesExA
GetProcAddress
LoadLibraryA
GetCurrentDirectoryA
CreateFileA
GetFileSize
GetFileAttributesA
ReadFile
SetFileAttributesA
CloseHandle
DeleteFileA
FindResourceA
GetModuleHandleExA
LoadResource
GetTickCount
SizeofResource
LockResource
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsProcessorFeaturePresent
MessageBoxA
SHGetSpecialFolderPathA
SHCreateDirectoryExA
?find_first_not_of@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIDI@Z
?str@?$basic_stringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBE?AV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@2@XZ
??_D?$basic_stringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEXXZ
?_M_decrement@?$_Rb_global@_N@priv@stlp_std@@SAPAU_Rb_tree_node_base@23@PAU423@@Z
?_Rebalance@?$_Rb_global@_N@priv@stlp_std@@SAXPAU_Rb_tree_node_base@23@AAPAU423@@Z
?__stl_throw_out_of_range@stlp_std@@YAXPBD@Z
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@V?$__move_source@V?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@@1@@Z
?find@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIPBDI@Z
?rfind@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIDI@Z
??Y?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@ABV01@@Z
?_Rebalance_for_erase@?$_Rb_global@_N@priv@stlp_std@@SAPAU_Rb_tree_node_base@23@PAU423@AAPAU423@11@Z
?_M_compare@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@SAHPBD000@Z
?rfind@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIPBDI@Z
?find@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIABV12@I@Z
?replace@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV12@PAD0PBD@Z
?replace@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV12@PAD0ABV12@@Z
?at@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAADI@Z
??_D?$basic_istringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEXXZ
?str@?$basic_istringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEXABV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@2@@Z
?max_size@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIXZ
?push_back@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEXD@Z
?sbumpc@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEHXZ
?sputbackc@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEHD@Z
??0?$_Isentry@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@AAV?$basic_istream@DV?$char_traits@D@stlp_std@@@1@_N@Z
??1?$_Isentry@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@XZ
??1locale@stlp_std@@QAE@XZ
?_M_use_facet@locale@stlp_std@@QBEPAVfacet@12@ABVid@12@@Z
?id@?$ctype@D@stlp_std@@2V0locale@2@A
??0?$basic_istringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@H@Z
?reserve@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEXI@Z
?_M_increment@?$_Rb_global@_N@priv@stlp_std@@SAPAU_Rb_tree_node_base@23@PAU423@@Z
?append@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV12@PBD@Z
?find_last_not_of@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIDI@Z
?clear@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEXXZ
??Y?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@D@Z
?append@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV12@PBDI@Z
?find@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEID@Z
?setstate@?$basic_ios@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXH@Z
?sputn@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE_JPBD_J@Z
??0?$_Osentry@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@AAV?$basic_ostream@DV?$char_traits@D@stlp_std@@@1@@Z
??1?$_Osentry@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@XZ
?sputc@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEHD@Z
?_M_put_nowiden@?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXPBD@Z
??4?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@PBD@Z
?allocate@__node_alloc@stlp_std@@SAPAXAAI@Z
?deallocate@__node_alloc@stlp_std@@SAXPAXI@Z
??Y?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@PBD@Z
?__stl_throw_length_error@stlp_std@@YAXPBD@Z
??1?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@XZ
??1?$allocator@D@stlp_std@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@ABV?$allocator@D@1@@Z
??4?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@ABV01@@Z
?find_last_of@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIPBDI@Z
?find_last_of@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIDI@Z
?substr@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBE?AV12@II@Z
?_M_deallocate_block@?$_String_base@DV?$allocator@D@stlp_std@@@priv@stlp_std@@IAEXXZ
?get_allocator@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBE?AV?$allocator@D@2@XZ
?_M_compute_next_size@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@AAEII@Z
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@ABV01@@Z
??0?$basic_stringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@H@Z
??6?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV01@I@Z
?compare@?$char_traits@D@stlp_std@@SAHPBD0I@Z
?getloc@ios_base@stlp_std@@QBE?AVlocale@2@XZ
?_M_construct_null@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@ABEXPAD@Z
?size@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIXZ
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@U_String_reserve_t@priv@1@IABV?$allocator@D@1@@Z
?append@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV12@ABV12@@Z
?allocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@stlp_std@@@priv@stlp_std@@QAEPADIAAI@Z
?clear@?$basic_ios@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXH@Z
__RTDynamicCast
__CxxFrameHandler3
memcpy
_CIsqrt
_CIsin
_CIcos
_CxxThrowException
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
strcpy_s
_stricmp
_stat64i32
strcspn
strrchr
strncpy
isprint
isalpha
tolower
isalnum
isspace
strncmp
fprintf
fopen
__iob_func
strstr
fputs
_vsnprintf_s
sscanf
fputc
atof
fwrite
fread
??_V@YAXPAX@Z
atoi
free
sprintf_s
sscanf_s
fclose
fseek
ftell
fopen_s
fread_s
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
strchr
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
memset
?PullInMyLibrary@@YAHXZ
DeleteIOModule
DoTest
GetIOModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE