DeleteP2PCore
DeleteP2PDownload
DeleteP2PDownloadEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetP2PDownload
GetP2PDownload2
GetP2PDownloadEx
GetP2PDownloadWithAppTypeByNew
Static task
static1
Behavioral task
behavioral1
Sample
37d28e4a5d62156d5b54963346d12cfae787a88f424566dcda7008f2c9ff9756.dll
Resource
win7-20220812-en
Target
37d28e4a5d62156d5b54963346d12cfae787a88f424566dcda7008f2c9ff9756
Size
224KB
MD5
30a6399d3b18d9993a83a1c24fe6a7f0
SHA1
bd3faaace64c5d7c4c85934deee64c226d20030d
SHA256
37d28e4a5d62156d5b54963346d12cfae787a88f424566dcda7008f2c9ff9756
SHA512
72f1d0ba0c3ce03163711c1d33f35fa8562683691fec2789120370d065429623fb7aeb438813f9e4231ed88004cd7ecb27e510c6e9b55b9e3ce2edb07434d3e4
SSDEEP
3072:bUFdQ65k6e3f88gV4aoWTBfPvqCVOgLxJKnx8aS6iX0Uaqeb0y:sr5kg8faoWTBvqCVOgzIx8aS6kxR60
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
gethostbyname
closesocket
socket
htonl
inet_ntoa
inet_addr
ntohs
WSAGetLastError
connect
ntohl
htons
recv
send
setsockopt
TerminateProcess
InterlockedCompareExchange
Sleep
GetVersionExA
GetThreadLocale
lstrcmpiA
InterlockedExchange
GetLastError
lstrlenW
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
FreeLibrary
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
SizeofResource
DisableThreadLibraryCalls
GetModuleFileNameA
DeleteCriticalSection
LoadResource
GetModuleHandleA
EnterCriticalSection
GetCurrentProcess
GetCurrentThreadId
LeaveCriticalSection
GetLocalTime
RaiseException
LoadLibraryExA
GetProcAddress
IsDBCSLeadByte
CreateEventA
CloseHandle
SetEvent
ResetEvent
WaitForSingleObject
GetExitCodeThread
CreateThread
OutputDebugStringA
WritePrivateProfileStringA
CreateDirectoryA
GetPrivateProfileStringA
GetFileAttributesA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetCurrentProcessId
CreateFileMappingA
FindFirstFileA
FindClose
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
GlobalAlloc
GlobalFree
GetLocaleInfoA
GetACP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FindResourceA
CharNextA
UnregisterClassA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegSetValueExA
SHGetSpecialFolderPathA
SHGetFolderPathA
CoLoadLibrary
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
SysAllocString
SysFreeString
UnRegisterTypeLi
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
_CxxThrowException
atoi
_ultoa
fread
ferror
ftell
fseek
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
memcpy
__CxxFrameHandler3
__CppXcptFilter
??3@YAXPAX@Z
free
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
rand
_recalloc
_resetstkoflw
malloc
??_V@YAXPAX@Z
_mbsrchr
memcpy_s
_vsnprintf_s
_snprintf_s
strcat_s
wcsncpy_s
strcpy_s
_purecall
_mbsnbcpy_s
__RTDynamicCast
_beginthreadex
_itoa
_snprintf
strncpy
fopen
fwrite
fclose
memmove_s
_strlwr_s
_atoi64
sprintf_s
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
DeleteP2PCore
DeleteP2PDownload
DeleteP2PDownloadEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetP2PDownload
GetP2PDownload2
GetP2PDownloadEx
GetP2PDownloadWithAppTypeByNew
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE