DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ea3Util
Static task
static1
Behavioral task
behavioral1
Sample
dc0f32b23ef4dc0ea834a3b7540f73428aeaec6bc1d6b1418a525ce4257cafcb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc0f32b23ef4dc0ea834a3b7540f73428aeaec6bc1d6b1418a525ce4257cafcb.dll
Resource
win10v2004-20220901-en
Target
dc0f32b23ef4dc0ea834a3b7540f73428aeaec6bc1d6b1418a525ce4257cafcb
Size
708KB
MD5
6101e3dbf9542f9d5e4eeee976fff950
SHA1
f5c5411a98de1844be9350d2439edbfbc1eb96b1
SHA256
dc0f32b23ef4dc0ea834a3b7540f73428aeaec6bc1d6b1418a525ce4257cafcb
SHA512
7c9a266c0baaee422cac602a1324ab8c0bd581ec63a2819d5055089ba27960c4a9cce6fe81a978aab6e77235c00cce781f3e8b932baeb1f7165fa50c39c1af38
SSDEEP
12288:yDjoYPdX2Scv/DW6KFvywiPys1TmYE3WbfKvGCPrjwDqjVpRDJsb442DPJyjO8qk:2joYh2ScaZFvywiPyslmHWbfKvLlxPox
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
mmioOpenA
mmioDescend
mmioRead
mmioClose
mmioAscend
GetThreadLocale
GetVersionExA
WideCharToMultiByte
CloseHandle
lstrlenW
CreateFileA
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
RaiseException
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrlenA
GetLocaleInfoA
DisableThreadLibraryCalls
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
ReadFile
WriteFile
GetFileSize
SetFilePointer
GetTempFileNameA
GetTempPathA
DeleteFileA
FindFirstFileA
LocalFree
GetACP
InterlockedExchange
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
lstrcmpiA
GetSystemTimeAsFileTime
FindClose
CharNextA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
CoCreateGuid
StringFromGUID2
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
VariantInit
VariantClear
SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VarBstrCat
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
?smbImportContent@@YA_NPAUIUnknown@@@Z
procfile
?emptyId3Tag@Atp@@2QBEB
?setTotalSF@AudioHeader@Atp@@QAEXI@Z
?isAac@Param@At3@@QBE_NXZ
?isPlain@Header@Ea3@@QBE_NXZ
??0OmgMmap@@QAE@PBG_NII@Z
?parseWmaFile@@YA_NPBXKAAPBXAAK@Z
?calcAt3SizeForPcm@@YAXIIAAI0@Z
??BBeUInt32@Header@Ea3@@QBEKXZ
?parseOmgFile@@YAXPBGAAUOmgHeaderInfo@@@Z
?parseHeader@At3@@YAXPBXIAAU__MIDL___MIDL_itf_omgfileparam_0000_0009@@@Z
??ROMGExceptionFunctor@@QAA?AVOMGExceptionImpl@@HPBDZZ
?parseOmgFile@@YAXPBXIAAUOmgHeaderInfo@@@Z
?isEncrypted@Header@Ea3@@QBE_NXZ
?canRead@Header@Ea3@@QBE_NXZ
?getLosslessTotalSuCount@Header@Ea3@@QBE_JXZ
?setAt3Mode@AacCodecInfo@@QAEXJ@Z
?setBitrate@AacCodecInfo@@QAEXK@Z
?setSamplingFrequency@AacCodecInfo@@QAE_NK@Z
?canPlay@AacCodecInfo@@SA_NU__MIDL___MIDL_itf_omgaacparam_0000_0005@@@Z
?setVersion@Header@Ea3@@QAEXE@Z
?parseHeader@Mp3Body@@SA_NQBEAAUMpegHeader@@AAUMpegInfo@@@Z
?size@OmgMmap@@QAEIXZ
??0Mp3Body@@QAE@XZ
?parseBody@Mp3Body@@QAEXPBXI@Z
??0OmgMmap@@QAE@PBD_NII@Z
?addr@OmgMmap@@QAEPAXXZ
??1OmgMmap@@QAE@XZ
??0Mp3Body@@QAE@PBXI@Z
?isAacRaw@Param@At3@@QBE_NXZ
?getCoreCodecParam@Param@At3@@QBE_NAAU12@@Z
?getAt3Param@Header@Atp@@QAE?AUParam@At3@@XZ
?emptyId3TagSize@Atp@@2IA
?createOmgAt3Header@@YAXIHI_NQBEPAE@Z
?setOmgMacAndDataPrefix@@YAIPAEQBEI@Z
?omgAt3HeaderSize@@YAIXZ
?allocate@ComAllocator@OmgComUtil@@SAPAXI@Z
?free@ComAllocator@OmgComUtil@@SAXPAX@Z
?getParam@At3@@YA?AUParam@1@J@Z
?pcmSizeToTotalSu@At3@@YAKKKW4__MIDL___MIDL_itf_omgfileparam_0000_0003@@@Z
?putData@OmgByteQueue@@QAEXPAEABI@Z
?getData@OmgByteQueue@@QAEIPAPAEPAI@Z
?clear@OmgByteQueue@@QAEXXZ
?getSize@OmgByteQueue@@QAEIXZ
?bitRateToMode@At3@@YAJKW4__MIDL___MIDL_itf_omgfileparam_0000_0003@@@Z
omglog
?Win32ErrorString@OMGExceptionImpl@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?code@OMGExceptionImpl@@QBEHXZ
?init@Header@Ea3@@QAEXPBXIPAI@Z
?getOmgcid@Header@Ea3@@QBE_NQAE@Z
?getEid@Header@Ea3@@QBE?AW4Eid@12@XZ
??0SilentMode@OMGExceptionImpl@@QAE@XZ
??1SilentMode@OMGExceptionImpl@@QAE@XZ
?unpackOmglsi@@YAJPBEKPAPAEPAK121212@Z
??0OmgSinf@@QAE@PBXI@Z
?getCommonLicenseSpid@OmgSinf@@QAEJXZ
??1OmgSinf@@QAE@XZ
?convertToSalSinf@OmgSinf@@QAEXQBEAAVOmgString@@@Z
?init@Header@Ea3@@QAEXPBDPAI11@Z
?getTcid@Header@Ea3@@QBE_NQAE@Z
??0OMGExceptionImpl@@QAE@HPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0H@Z
??1OMGExceptionImpl@@UAE@XZ
??0OMGExceptionImpl@@QAE@ABV0@@Z
??0OmgCriticalSection@@QAE@XZ
??1OmgCriticalSection@@UAE@XZ
?setAt3Param@Header@Atp@@QAEXABUParam@At3@@@Z
??0OmgStdIo@@QAE@PBD0@Z
?seek@OmgStdIo@@QAEXJH@Z
?tell@OmgStdIo@@QAEJXZ
?write@OmgStdIo@@QAEIPBXI@Z
?size@OmgStdIo@@QAEJXZ
?read@OmgStdIo@@QAEIPAXI@Z
??1OmgStdIo@@QAE@XZ
?isLossLess@Param@At3@@QBE_NXZ
??4BeUInt32@Header@Ea3@@QAEKK@Z
?getAt3Mode@Header@Ea3@@QBEJXZ
?getAt3Param@Header@Ea3@@QBEXAAUParam@At3@@@Z
?verify@Header@Atp@@QAE_NXZ
??0Header@Atp@@QAE@XZ
??1OmgByteQueue@@UAE@XZ
??0OmgByteQueue@@QAE@II@Z
?calcOmgAt3Duration@@YA_NABU__MIDL___MIDL_itf_omgfileparam_0000_0007@@PA_J@Z
?calcOmgAt3TotalSu@@YA_NABU__MIDL___MIDL_itf_omgfileparam_0000_0007@@PAK@Z
?getId3TagSize@Ea3@@YAIPBX@Z
?setEid@Header@Ea3@@QAEXW4Eid@12@@Z
?setAt3Param@Header@Ea3@@QAEXABUParam@At3@@@Z
?setOmgcid@Header@Ea3@@QAEXQBE@Z
?getId3TagSize@Atp@@SAIPBX@Z
??0OMGExceptionFunctor@@QAE@PBDHK@Z
?reset@Header@Ea3@@QAEXXZ
?omgRegQueryValue@@YA_NPBDAAK_N@Z
?getDiscRoot@LgDisc@@SA_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?createInstance@LgDisc@@SAPAV1@PBD@Z
?getUlong@LgDisc@@SAKQBE@Z
salwrap0
salwrap1
CStdStubBuffer_Connect
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_DebugServerRelease
fseek
_access
__CppXcptFilter
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
wcscmp
_wsplitpath
_vsnprintf
fread
realloc
wcsncpy
_resetstkoflw
malloc
fwrite
fopen
fclose
_except_handler3
??_U@YAPAXI@Z
??_V@YAXPAX@Z
wcslen
??8type_info@@QBEHABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
free
_swab
sprintf
??2@YAPAXI@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z
__CxxFrameHandler
memset
memmove
memcpy
memcmp
__security_error_handler
PathIsRelativeA
PathFindExtensionA
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Xran@_String_base@std@@QBEXXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Xlen@_String_base@std@@QBEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ea3Util
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE