DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8a70e87401c346de0e408053869ab8f424e4ea60d5a0e1b24d85d86549965ad7.dll
Resource
win7-20220812-en
Target
8a70e87401c346de0e408053869ab8f424e4ea60d5a0e1b24d85d86549965ad7
Size
72KB
MD5
6623208ebef0c01eededbd3d74e6f04e
SHA1
27fc6b1b95b6588071c57aac10359de3c4fed0ac
SHA256
8a70e87401c346de0e408053869ab8f424e4ea60d5a0e1b24d85d86549965ad7
SHA512
cd648d80b056d4bde06fb8e6dddb21bf8939d9a8a3f6efda025f97e61efdad24acf3db2f8fdaaa528d8b26d83c3ad14aeab88a233d2c7fa75d6e200b203bb741
SSDEEP
1536:gCgAuZXjRqeZCF2YlbGselEq/eCmZrcfWPmVFFvsDqz:gz3XjL8wYotFvsDc
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
GetCurrentProcessId
LeaveCriticalSection
MoveFileA
SetFileAttributesA
WideCharToMultiByte
GetExitCodeProcess
WaitForSingleObject
Sleep
RemoveDirectoryA
WritePrivateProfileStringA
Process32Next
Process32First
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LocalFree
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
GetCommandLineW
CreateThread
CreateDirectoryA
ExitProcess
RegQueryValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
memcmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strchr
atoi
strcmp
_wcslwr
wcsstr
fopen
fseek
sprintf
??3@YAXPAX@Z
_access
strcat
memset
strstr
strrchr
??2@YAPAXI@Z
memcpy
_purecall
_strupr
strlen
strcpy
fclose
fread
ftell
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ