ElipseShape
FuximableWewe
MoveNewDest
UOfHKccQtKkJpSlYnD
UXYOYfiiifDjiSFxxy
eCIHCKYfkcfIloEHHh
Static task
static1
Behavioral task
behavioral1
Sample
fofr.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fofr.dll
Resource
win10v2004-20220901-en
Target
fofr.dll
Size
299KB
MD5
73cff03460152e77dbd824498f4e59c7
SHA1
51c87e649f847b0c6588a61278302569555c3b55
SHA256
b11de1faaae41569cd060ed71ff0ce33d87dff1076172f473024da39898f8f6b
SHA512
89c90bae061621d34dde48321c2012f80036f24aea378d99c491afa77be497f6ee08e24df5a02af2f0300e0ff59cbc9a8847d82fca943dd0598d46d0cf5b1c21
SSDEEP
6144:R7WRYWsp7opRVYLa1Z56t9ZpMIQ2Mp8PJuu:Vms+pRSm1mhpMImp8
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetNumaHighestNodeNumber
ReadFile
OpenEventA
EnumLanguageGroupLocalesW
SizeofResource
QueryDosDeviceW
CreateFileMappingNumaA
SetConsoleCtrlHandler
EnumTimeFormatsW
SetThreadLocale
HeapCreate
ReplaceFileA
VirtualProtect
HeapFree
GetCommProperties
GetCommandLineW
GetHandleInformation
WriteFile
DeviceIoControl
GetDriveTypeA
GetUserDefaultLangID
OpenPrivateNamespaceW
GetCommModemStatus
IsEnclaveTypeSupported
EnumCalendarInfoA
SetFilePointer
GetCompressedFileSizeW
EnumResourceNamesW
FindFirstVolumeA
lstrlenA
GetVolumeInformationA
WaitForSingleObject
LocalAlloc
SetComputerNameExW
UnregisterApplicationRecoveryCallback
CreateActCtxA
SetUserGeoName
ResumeThread
GlobalGetAtomNameW
CommConfigDialogA
RemoveSecureMemoryCacheCallback
ResolveLocaleName
Sleep
GetFileInformationByHandle
BuildCommDCBAndTimeoutsW
EnumUILanguagesA
GlobalAddAtomA
CompareStringA
GetLastError
OpenMutexA
GetBinaryTypeA
GetMaximumProcessorGroupCount
GetStringTypeExA
MoveFileExA
SetMessageWaitingIndicator
EnumResourceNamesExA
CreateFileA
SetDllDirectoryA
EnumDateFormatsExEx
TlsAlloc
CloseHandle
CompareStringEx
GetNumberFormatW
EnumResourceLanguagesW
CreateSymbolicLinkTransactedW
WritePrivateProfileStringA
ResetEvent
GetActiveProcessorCount
HeapAlloc
GetCurrentDirectoryW
GetCurrentConsoleFontEx
SwitchToThread
MoveFileWithProgressA
CreateJobObjectA
GetFileSize
FindFirstStreamW
GetProcessHeap
GetNumaProximityNode
GlobalUnfix
GetProcessInformation
lstrcmpiA
LocalReAlloc
TerminateJobObject
GetThreadGroupAffinity
GetSystemRegistryQuota
FindNextStreamW
SetDllDirectoryW
MoveFileW
GetProfileStringA
GetProcessTimes
GetFileTime
FlushFileBuffers
WriteConsoleW
CreateFileW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WaitForInputIdle
RegisterClassExW
GetWindowPlacement
GetClassInfoW
ExitWindowsEx
QueryDisplayConfig
GetPointerInputTransform
GetWindowDpiHostingBehavior
DrawStateW
CharToOemBuffA
CancelShutdown
EnumPropsW
RegisterClassA
RegisterClipboardFormatA
GetClipboardData
GetDisplayConfigBufferSizes
SendDlgItemMessageA
ScrollWindowEx
DisplayConfigSetDeviceInfo
DisplayConfigGetDeviceInfo
LookupIconIdFromDirectoryEx
SetProcessDPIAware
RegisterPointerInputTarget
DrawFrameControl
CharNextExA
GetRawPointerDeviceData
TranslateAcceleratorW
ElipseShape
FuximableWewe
MoveNewDest
UOfHKccQtKkJpSlYnD
UXYOYfiiifDjiSFxxy
eCIHCKYfkcfIloEHHh
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ