CreateNBVSSInterface
DeleteNBVSSInterface
Static task
static1
Behavioral task
behavioral1
Sample
f2db2377fcebb4f0e37446dbc48d6f579a17f70e7b33b1df53e6084aa37ca4c1.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2db2377fcebb4f0e37446dbc48d6f579a17f70e7b33b1df53e6084aa37ca4c1.dll
Resource
win10v2004-20220812-en
Target
f2db2377fcebb4f0e37446dbc48d6f579a17f70e7b33b1df53e6084aa37ca4c1
Size
228KB
MD5
4b78a5bf2212900469e308c063803ef0
SHA1
53687fd4528005f02d37f9b5c6d2a52decfac5ba
SHA256
f2db2377fcebb4f0e37446dbc48d6f579a17f70e7b33b1df53e6084aa37ca4c1
SHA512
fe948fe7136bf966d6b46afbfdbcb8054ca5130698942586a6b308ec5cd7a6d8ba7191c8b446c608f9756f3e2c372ebb54c949afc00cb848ad9a0b59d6945c44
SSDEEP
3072:T5k2FmILDIQlw5eVfjJ6C0pbtqdFXnVq9F/Mi/K4DZEbfIozbeHnwwkX6DU5qj9s:FOUqeQAW/JNZQx3eHwHb5+V6z
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PathIsDirectoryW
CreateSemaphoreW
ReleaseSemaphore
WaitForSingleObject
GetCurrentProcess
SetLastError
CloseHandle
Sleep
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
FindFirstFileW
FindClose
FindNextFileW
GetFileSize
SetFileTime
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
WriteFile
ReadFile
CreateFileW
GetVolumeInformationW
GetModuleFileNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetShortPathNameW
GetTempFileNameW
DeleteFileW
GetTempPathW
GetVersionExW
LocalAlloc
FormatMessageW
LocalFree
CopyFileW
LoadLibraryW
FreeLibrary
ExpandEnvironmentStringsW
MoveFileW
GetFileAttributesW
GetDriveTypeW
GetModuleHandleW
GetProcAddress
GetDiskFreeSpaceW
WideCharToMultiByte
CompareStringW
MultiByteToWideChar
IsBadStringPtrA
IsBadStringPtrW
IsBadReadPtr
IsBadWritePtr
BackupRead
BackupWrite
BackupSeek
CreateEventW
ResetEvent
SetEvent
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
SetFilePointer
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FileTimeToLocalFileTime
GetLogicalDriveStringsW
LocalFileTimeToFileTime
FindWindowW
UnregisterClassW
UnregisterClassA
RegCloseKey
RegCreateKeyW
QueryServiceConfigW
CloseServiceHandle
OpenServiceW
RegDeleteKeyW
RegSetValueExW
OpenSCManagerW
QueryServiceStatus
GetUserNameW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyExW
CoInitialize
CoUninitialize
CoTaskMemFree
StringFromCLSID
CoCreateGuid
SysFreeString
SysAllocString
?_Nomemory@std@@YAXXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?_Unlock@_Mutex@std@@QAEXXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?OnPreRestore@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPostRestore@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnVSSShutdown@CVssWriter@@UAG_NXZ
??0CVssWriter@@QAE@XZ
??1CVssWriter@@UAE@XZ
?OnVSSApplicationStartup@CVssWriter@@UAG_NXZ
?OnContinueIOOnVolume@CVssWriter@@UAG_NPAGU_GUID@@1@Z
?OnBackOffIOOnVolume@CVssWriter@@UAG_NPAGU_GUID@@1@Z
?Initialize@CVssWriter@@QAGJU_GUID@@PBGW4VSS_USAGE_TYPE@@W4VSS_SOURCE_TYPE@@W4_VSS_APPLICATION_LEVEL@@KW4VSS_ALTERNATE_WRITER_STATE@@_N@Z
?Unsubscribe@CVssWriter@@QAGJXZ
?CreateVssBackupComponents@@YGJPAPAVIVssBackupComponents@@@Z
?Subscribe@CVssWriter@@QAGJK@Z
_initterm
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
_onexit
??1type_info@@UAE@XZ
__security_error_handler
realloc
memset
_callnewh
malloc
wcsftime
mktime
swscanf
localtime
floor
_wsplitpath
_wfullpath
isspace
strncpy
_wtoi
iswdigit
wcsncmp
vswprintf
wcspbrk
wcsstr
_wcsicmp
wcscmp
wcscpy
wcscat
wcsncpy
memmove
wcschr
iswspace
_wcsrev
_wcslwr
_wcsupr
??_V@YAXPAX@Z
wcslen
_wcsnicmp
clock
_purecall
??3@YAXPAX@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
free
_except_handler3
__dllonexit
??0exception@@QAE@ABV0@@Z
wcsrchr
PlaySoundW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
SHGetFileInfoW
CreateNBVSSInterface
DeleteNBVSSInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE