DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
5ea506943d6d04f6110f804dc8ac1ec907455fb94fd8bb2869cfb4bc332e26aa.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5ea506943d6d04f6110f804dc8ac1ec907455fb94fd8bb2869cfb4bc332e26aa.dll
Resource
win10v2004-20220812-en
Target
5ea506943d6d04f6110f804dc8ac1ec907455fb94fd8bb2869cfb4bc332e26aa
Size
57KB
MD5
52ec00c97d62b628622ff3254487547d
SHA1
0dcffd3f485de597d7c8d8608d2bbadf9e328738
SHA256
5ea506943d6d04f6110f804dc8ac1ec907455fb94fd8bb2869cfb4bc332e26aa
SHA512
bb8313dc0bdd93d361736699769dd2773d089f6bf64fdba833e1ea189508de1a6505119d96cde6c0c75adec063d4e5fcbc25a7fa50824f20a8d1cb65059afbf6
SSDEEP
1536:gNIKDP4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:1qP4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ