DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b4c5948e8003d197f72d35e761a213cc1ba029892a86211834701a7ce3dbb148.dll
Resource
win7-20220901-en
Target
b4c5948e8003d197f72d35e761a213cc1ba029892a86211834701a7ce3dbb148
Size
72KB
MD5
60f3d2d0f8c9656ffb65ecbce14b54cc
SHA1
b5b57c472e1dbed970a550edc9fe8e324564cb1a
SHA256
b4c5948e8003d197f72d35e761a213cc1ba029892a86211834701a7ce3dbb148
SHA512
dbccc1fc752096673b2e3edc4ebf7f31b627375a4507b4cdd76c2ca0f59e6cae1c8b79765b1d2a7f0138a1f0cff1bf016280a8cc26025b914b11455f6746b112
SSDEEP
1536:SyZTABL0nbFuCqVDinqelYsqkY+3FvT+/NnjSI44S:TFE4aV+DY+dMpjSI44S
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetPrivateProfileStringA
FindFirstFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
Process32Next
SetFileAttributesA
GetCommandLineW
LocalFree
WritePrivateProfileStringA
MoveFileA
GetProcAddress
RemoveDirectoryA
ExitProcess
CreateThread
FindNextFileA
CreateDirectoryA
lstrlenW
WideCharToMultiByte
GetCurrentProcessId
LoadLibraryA
FreeLibrary
Sleep
DeleteFileA
WaitForSingleObject
GetExitCodeProcess
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
CreateProcessA
Process32First
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
ftell
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcmp
memcmp
_purecall
memcpy
_wcslwr
wcsstr
atoi
_access
strncmp
memset
sprintf
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
strlen
strcat
strcpy
fclose
fread
_stricmp
fseek
fopen
strrchr
strncpy
strchr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ