CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
d0836b3b08ed9c4d873139e37148370a02836defc96abbce08f7f3d67faa866a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d0836b3b08ed9c4d873139e37148370a02836defc96abbce08f7f3d67faa866a.dll
Resource
win10v2004-20220812-en
Target
d0836b3b08ed9c4d873139e37148370a02836defc96abbce08f7f3d67faa866a
Size
104KB
MD5
37a22b3a60567cb1230a9ceb4c4420b0
SHA1
b6d6ac7b9782f00403b0ea291bf98772988f8444
SHA256
d0836b3b08ed9c4d873139e37148370a02836defc96abbce08f7f3d67faa866a
SHA512
3adb915599b3259cb180da414847dbcfbc0ac7ec1905f8702a3824398beee3740b8387f62b364dab79b1431cbde3c602e03e04f723d707936f94fbe0d1519a2c
SSDEEP
3072:+qgE2wnKBO8d216HxrCJW7WiBL/cufWYZ:jgBQ8Q148EWiBL/cu+YZ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
_vsnprintf
srand
time
tolower
strrchr
_except_handler3
memcpy
rand
malloc
free
exit
strncpy
wcsstr
wcscpy
wcsncat
strstr
wcslen
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
??3@YAXPAX@Z
strlen
sprintf
memset
_strupr
_strcmpi
lstrlenA
MultiByteToWideChar
GetModuleHandleA
GetProcessHeap
HeapAlloc
SetFilePointer
CreateToolhelp32Snapshot
Module32First
Module32Next
CloseHandle
GetTempPathA
DeleteFileA
GetFileSize
ReadFile
WideCharToMultiByte
GetFileAttributesW
GetPrivateProfileStringA
Sleep
LoadLibraryA
FreeLibrary
wsprintfA
GetWindow
GetClassNameW
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetDC
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE