CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
53b67a57827ba1fd4fcd92fc155d2a5831c268e5eb4942df4bea23bcd6846213.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
53b67a57827ba1fd4fcd92fc155d2a5831c268e5eb4942df4bea23bcd6846213.dll
Resource
win10v2004-20220812-en
Target
53b67a57827ba1fd4fcd92fc155d2a5831c268e5eb4942df4bea23bcd6846213
Size
1.0MB
MD5
6e6a8bb4930ffe204638195c937d62c8
SHA1
34b9186957c44fe520c2230a9773268f1e897546
SHA256
53b67a57827ba1fd4fcd92fc155d2a5831c268e5eb4942df4bea23bcd6846213
SHA512
2e9cfa73c4bbd04d2783adc5c86407147810a0702031fa560af13e4b9c26761a73307e99e168ec8d85014e90bed12aa4c54d0e8c36f0a7af07787ec2f158ec7c
SSDEEP
3072:f6hvu+ytAUy2uSsfqgD4Tat2Zw2HK3iQx/:ChW+csf9D6at2ZLHYiQ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LocalAlloc
PeekNamedPipe
lstrcatA
InterlockedDecrement
WinExec
CreateMutexA
CreateFileW
SetFilePointer
SetEndOfFile
UnmapViewOfFile
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
GetFileSize
MapViewOfFile
CreateFileMappingA
GetDiskFreeSpaceExW
GetVolumeInformationW
lstrcpyW
lstrlenW
GetLogicalDriveStringsW
LocalReAlloc
CreateRemoteThread
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
CreateFileA
LoadLibraryA
MultiByteToWideChar
ReadFile
GetCurrentProcessId
VirtualFreeEx
VirtualAllocEx
lstrcmpiA
FreeLibrary
GetCurrentThread
WideCharToMultiByte
lstrcpyA
GetLastError
SetFileTime
GetFileTime
Process32First
CreateToolhelp32Snapshot
VirtualProtect
GetCurrentThreadId
InterlockedExchange
CreateEventA
ResumeThread
SetEvent
VirtualFree
VirtualAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalFree
CreatePipe
GetStartupInfoA
CreateProcessA
WaitForSingleObject
TerminateProcess
DisconnectNamedPipe
WriteFile
lstrlenA
InterlockedIncrement
GetDriveTypeW
GetTempPathA
DeleteFileA
CloseHandle
AllocConsole
Sleep
MoveFileExA
GetTickCount
FreeConsole
GetCommandLineA
OpenProcess
CloseDesktop
BlockInput
keybd_event
MapVirtualKeyA
SetCapture
WindowFromPoint
SetCursorPos
mouse_event
GetCursorInfo
ReleaseDC
DestroyCursor
LoadCursorA
GetDesktopWindow
GetDC
CloseWindowStation
wsprintfA
wsprintfW
SwitchDesktop
SetThreadDesktop
CreateDesktopA
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
SetRect
GetSystemMetrics
GetCursorPos
CreateCompatibleBitmap
GetDIBits
BitBlt
DeleteDC
CreateCompatibleDC
CreateDIBSection
DeleteObject
SelectObject
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
SHGetFileInfoW
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysFreeString
GetErrorInfo
PathFileExistsW
StrStrIA
PathFileExistsA
StrStrIW
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Xran@std@@YAXXZ
WSACleanup
WSAStartup
htonl
bind
sendto
recv
htons
connect
select
inet_ntoa
inet_addr
gethostname
ioctlsocket
closesocket
socket
gethostbyname
send
srand
rand
_wsplitpath
_beginthreadex
wcslen
atoi
??2@YAPAXI@Z
strrchr
malloc
wcsrchr
_itoa
strncat
strstr
free
wcsncmp
strtol
memmove
sscanf
_CxxThrowException
_wtoi
wcsncpy
wcscpy
time
_purecall
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_wcsicmp
__CxxFrameHandler
MakeSureDirectoryPathExists
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ