DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08fce9d43748699f26c468b1189d917ccf7fc4af80bf8f04dc713fb316fdbe59.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08fce9d43748699f26c468b1189d917ccf7fc4af80bf8f04dc713fb316fdbe59.dll
Resource
win10v2004-20220812-en
Target
08fce9d43748699f26c468b1189d917ccf7fc4af80bf8f04dc713fb316fdbe59
Size
720KB
MD5
647b8acba83ffcc13e0d674c8c9cb7c2
SHA1
536e6c5d1d5e0024ce505b8bad42a7af5ec9eaf4
SHA256
08fce9d43748699f26c468b1189d917ccf7fc4af80bf8f04dc713fb316fdbe59
SHA512
dd16c97ca2123baacab5a205d66443a4fa8bd31a112709715ff4b39435dbe4b47f190fb7cabf94c11c6425fc3188ac98fe3df5ead6cb494a847c6179d8f21731
SSDEEP
12288:TwbysEC56Ly1zIq05Vxdbi3Dao8GKXl/NFvEpx29P/:TGZx1zIq05VxdiDMxXpNGk9/
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
inet_addr
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEH_WH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringA@@QAE@PBDH@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
wcslcat
?GenerateG1@CComputerIDGenerator@@QAEKPAE@Z
??0CTXBSTR@@QAE@HPB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
?StringToDWordW@Convert@Util@@YA_NPB_WAAK@Z
??7CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?ToLower@CTXBSTR@@QAEJXZ
?GetClientType@ClientType@ProductConfig@Util@@YAJPAK@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?IsDecodeReachEnd@CCmdCodecBase@@IAEHXZ
?GetMemoryUsage@Sys@Util@@YAXAAK0@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?IsCSSubSendData@Misc@Util@@YAHPAUITXData@@@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?GetLCID@TXI18N@@YAKXZ
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?DecodeString@CCmdCodecBase@@IAEXPB_WI@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownload@@QAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?Generate@CComputerIDGenerator@@QAEKPAE@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?ConventAnsiBufferToBSTR@SSOConvert@Util@@YAHAAVCTXBuffer@@AAVCTXBSTR@@H@Z
?GetBuf@CTXCommPack@@QAEHPAPBEHH@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Empty@CTXBSTR@@QAEXXZ
?GetBinDir@Dir@Util@@YA?AVCTXStringW@@XZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?IsFileExist@FS@@YAHPB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?Attach@CTXBSTR@@QAEXPA_W@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?GetAt@CTXStringW@@QBE_WH@Z
?Empty@CTXStringW@@QAEXXZ
??YCTXStringW@@QAEAAV0@_W@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@XZ
?CreateChannel@Connection@Util@@YAJHPAPAUITXChannel@@@Z
?CreateTXData@SSOData@Util@@YAHPAPAUITXSSOData@@@Z
?CreateTXBuffer@SSOData@Util@@YAHPAPAUITXSSOBuffer@@@Z
??BCTXStringW@@QBEPB_WXZ
?Format@CTXStringW@@QAAXPB_WZZ
?CopyTXDataField@SSOData@Util@@YAHPAUITXSSODataRead@@PAUITXSSOData@@PB_W2@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??8CTXBSTR@@QBE_NPA_W@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?StringToIP@Network@Util@@YAKPB_W@Z
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
?Random@Sys@Util@@YAHXZ
?GetLCID@NLS@@YAKXZ
?GetTimeOffsetUTC@NLS@@YAJXZ
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
?GetHostByName@HostResolve@Util@@YAJPA_WPAPA_W@Z
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
??0CTXStringW@@QAE@PB_WH@Z
?CancelResolve@HostResolve@Util@@YAJK@Z
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAV2@H@Z
?ChangeConfig@CCmdCodecBase@@IAEXHH@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??ICTXBSTR@@QAEPAPA_WXZ
??0CCmdCodecBase@@QAE@XZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?GetIEProxySetting@Network@Util@@YAHPAUITXData@@AAE@Z
?GetIEProxyUserName@Network@Util@@YAHAAVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXCommPack@@QAE@XZ
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXCommPack@@UAE@XZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
??0CTXStringW@@QAE@PA_W@Z
?GetProcessName@SystemHelp@Util@@YA?AVCTXStringW@@K@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXSSOBufferToTXBuffer@SSOConvert@Util@@YAJPAUITXSSOBuffer@@PAPAUITXBuffer@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
?ConvertTXSSODataToTXData@SSOConvert@Util@@YAJPAUITXSSOData@@PAPAUITXData@@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?ConvertTXDataToTXSSOData@SSOConvert@Util@@YAJPAUITXData@@PAPAUITXSSOData@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?GetUserDefaultLCID@NLS@@YAKXZ
?SetLCID@NLS@@YAHK@Z
?NotifyIdle@TXTimer@@YAXXZ
?SetUserLCID@TXI18N@@YAXK@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?GetRootDir@Dir@Util@@YA?AVCTXStringW@@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?SetConfigFile@TXI18N@@YAHPB_W0@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?InitNetwork@Network@Util@@YAHXZ
?GetSSOTempDir@Dir@Util@@YA?AVCTXStringW@@XZ
??0CTXStringW@@QAE@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?InitDownloadTempDirectory@CTXHttpDownload@@SAXPB_W@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Length@CTXBSTR@@QBEIXZ
?CreateTXArray@SSOData@Util@@YAHPAPAUITXSSOArray@@@Z
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleA
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
GetProcessHeap
GetCommandLineA
CreateThread
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
GetVersionExA
GetLocaleInfoA
TlsSetValue
InterlockedExchange
TlsFree
SetLastError
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetLocaleInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
SetHandleCount
RaiseException
GetACP
GetFileType
LocalAlloc
LoadLibraryA
GetWindowsDirectoryA
GetProcAddress
GetSystemDirectoryA
GetModuleFileNameA
CreateDirectoryW
GetCommandLineW
TerminateThread
VirtualProtect
GlobalAlloc
GlobalFree
GetSystemDirectoryW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetFileAttributesW
GetVersionExW
LocalFree
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
CreateMutexW
OpenMutexW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CloseHandle
GetThreadLocale
SetThreadLocale
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
lstrlenW
UnregisterClassA
GetClassInfoExW
RegisterClassExW
CreateWindowExW
ShowWindow
SetWindowLongW
DefWindowProcW
DestroyWindow
SendMessageTimeoutW
GetDesktopWindow
SendMessageW
PostMessageW
IsWindow
GetWindowThreadProcessId
CharNextW
GetWindowLongW
GetStockObject
SetSecurityDescriptorSacl
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SHGetSpecialFolderPathW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
VariantInit
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ