DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cccd5889913d267862c7c0ff6e74c335f26b4276910e789d4f47ef04c9ce1f3f.dll
Resource
win7-20220812-en
Target
cccd5889913d267862c7c0ff6e74c335f26b4276910e789d4f47ef04c9ce1f3f
Size
64KB
MD5
5472bf6a65024939a1ab7ab5487317eb
SHA1
0eccc356bcdf04289cf1e9b6d8dd85299debbbcb
SHA256
cccd5889913d267862c7c0ff6e74c335f26b4276910e789d4f47ef04c9ce1f3f
SHA512
d9b9812c8337a04bae8744534efdf5dab6d01b6235b833585f2e9fd56cac597e78ef5878a9c89d6b9b45f4109917e425bf4cf02cd3ec2cd9c55a383623e5dcc7
SSDEEP
1536:Uzzc0i+H1ilI88P00JIlszaeWNQoiN1jz8w3wR:t0r1i58c0JI42iHjzT3w
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FreeLibrary
LoadLibraryA
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenW
lstrlenA
GetShortPathNameA
ExitProcess
GetProcAddress
WideCharToMultiByte
WritePrivateProfileStringA
RemoveDirectoryA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateThread
CreateDirectoryA
LocalFree
EnterCriticalSection
LeaveCriticalSection
GetCommandLineW
MultiByteToWideChar
SetFileAttributesA
MoveFileA
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
Process32First
Process32Next
Sleep
CloseHandle
GetModuleHandleA
RegQueryValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strcat
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_access
strcmp
memcmp
_purecall
memcpy
strstr
atoi
_wcslwr
wcsstr
??3@YAXPAX@Z
strcpy
memset
sprintf
fclose
fread
??2@YAPAXI@Z
ftell
fseek
fopen
_strupr
strrchr
strlen
strncpy
strchr
strncmp
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ