DisplayWizard
KillWizard
Static task
static1
Behavioral task
behavioral1
Sample
5d0e2153aee34cf49221794dfdc8375282090b51160591686828820b3f0d8310.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5d0e2153aee34cf49221794dfdc8375282090b51160591686828820b3f0d8310.dll
Resource
win10v2004-20220812-en
Target
5d0e2153aee34cf49221794dfdc8375282090b51160591686828820b3f0d8310
Size
336KB
MD5
7069eb3fc4d8636cf59c735a1c73016b
SHA1
7f09b9a165ff53d9bf269721f52270389f3c305b
SHA256
5d0e2153aee34cf49221794dfdc8375282090b51160591686828820b3f0d8310
SHA512
30789d85396dc191befc8b49f72b8bb17bd3dd02766d49891f1f43635955884a0469908e3283369ee98e64cecb5668b44f1401731c054c3808383b74a5812011
SSDEEP
6144:U/bUh85WJl5OqZsbOAC68gRXtbTp2slwOA80E:zh85ol5O4u8g9n0slL7
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyW
?MakeOpaque@CYImage@@QAEXK@Z
??1CYImage@@UAE@XZ
??0CYImage@@QAE@XZ
?Unload@CYImage@@QAEXXZ
?Draw@CYImage@@QBE_NPAUHDC__@@HH@Z
?Draw@CYImage@@QBE_NPAUHDC__@@ABUtagRECT@@ABUtagPOINT@@@Z
?LoadPNG@CYImage@@QAE_NPAUHINSTANCE__@@H@Z
ord17
ylog_status
ylog_error
ymdm_audio_device_release
ymdm_audio_device_get_info
ymdm_audio_device_create
ymdm_audio_device_count_devices
ymdm_audio_device_mute
ymdm_audio_device_display_name
ymdm_audio_device_is_muted
ymdm_video_capt_device_create
ymdm_video_capt_device_release
ymdm_video_capt_device_get_info
ymdm_video_capt_device_count
rmc_audio_pin_start
rmc_audio_create
rmc_audio_release
rmc_audio_count_codecs
rmc_audio_create_rendering_pin
rmc_audio_create_local_play_pin
rmc_audio_pin_get_volume
rmc_audio_start
rmc_audio_create_capture_pin
rmc_audio_pin_set_volume
rmc_audio_create_transport_output_pin
rmc_audio_register_callback
rmc_audio_unregister_callback
rmc_audio_get_codec_info
rmc_audio_update_send_codec
rmc_audio_pin_stop
rmc_audio_release_pin
rmc_audio_stop
ymsdk_register_cb
ymsdk_stop_local_video
ymsdk_unregister_cb
ymsdk_start_local_video
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
Sleep
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
DisableThreadLibraryCalls
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
LockResource
FindResourceExW
FlushInstructionCache
GetCurrentProcess
GlobalAlloc
lstrcmpW
MulDiv
GlobalUnlock
GlobalLock
SetLastError
GlobalFree
GlobalHandle
DeleteFileW
WideCharToMultiByte
lstrlenA
CreateDirectoryW
GetFileAttributesW
lstrcpynW
GetProcAddress
CloseHandle
CreateFileW
GetACP
InterlockedCompareExchange
GetVersionExA
CharNextW
SetWindowPos
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
LoadStringW
SendDlgItemMessageW
KillTimer
SetTimer
UpdateWindow
LoadIconW
AppendMenuW
GetSystemMetrics
GetActiveWindow
CreateDialogIndirectParamW
ShowWindow
SetCursor
GetCursorPos
GetMessageTime
DrawTextW
SetWindowContextHelpId
MapDialogRect
EnableWindow
GetDlgCtrlID
GetSystemMenu
PostMessageW
EndDialog
GetWindowRect
FindWindowW
DialogBoxIndirectParamW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
CreateAcceleratorTableW
CreateWindowExW
RegisterClassExW
LoadCursorW
GetClassInfoExW
IsWindow
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
CallWindowProcW
DestroyWindow
FillRect
ReleaseCapture
GetClassNameW
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
MoveWindow
GetSysColor
DefWindowProcW
SendMessageW
GetWindowLongW
SetWindowLongW
UnregisterClassA
CreateSolidBrush
GetObjectW
GetStockObject
CreateCompatibleBitmap
GetDeviceCaps
BitBlt
CreateCompatibleDC
SetTextColor
SelectObject
DeleteObject
DeleteDC
GetBkColor
GetTextColor
SetBkMode
RoundRect
CreatePen
CreateFontIndirectW
CreateFontW
SetBkColor
ShellExecuteW
SHGetFolderPathW
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
SysAllocString
SysStringLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
VariantInit
SysStringByteLen
SysFreeString
SysAllocStringLen
VarUI4FromStr
PathAppendW
??1_Lockit@std@@QAE@XZ
?_Register@facet@locale@std@@QAEXXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?_Incref@facet@locale@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBEHXZ
?eof@ios_base@std@@QBE_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?toupper@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??1locale@std@@QAE@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0locale@std@@QAE@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??3@YAXPAX@Z
wcsrchr
memmove_s
_CxxThrowException
memset
wcslen
memcpy_s
malloc
free
wcsncpy_s
??_V@YAXPAX@Z
_recalloc
wcsncpy
??2@YAPAXI@Z
memcmp
swprintf_s
_unlock
_except_handler4_common
_invalid_parameter_noinfo
memcpy
wcscmp
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
strlen
_purecall
??0exception@std@@QAE@ABV01@@Z
_resetstkoflw
wcsstr
strncpy
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
_wcsicmp
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_vsnprintf
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_wtempnam
__CxxFrameHandler3
DisplayWizard
KillWizard
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE