DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
971a56b8e32e9151c4a0ac40a97387bfaba7382ac74ef39a0a25f9850275c33c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
971a56b8e32e9151c4a0ac40a97387bfaba7382ac74ef39a0a25f9850275c33c.exe
Resource
win10v2004-20220901-en
Target
971a56b8e32e9151c4a0ac40a97387bfaba7382ac74ef39a0a25f9850275c33c
Size
122KB
MD5
7ca70e87df948ae75da8ebc3c662fb00
SHA1
a7d019313cc901e228eba7c9901d2dd5b3dfb073
SHA256
971a56b8e32e9151c4a0ac40a97387bfaba7382ac74ef39a0a25f9850275c33c
SHA512
b739b78c33135a91bd468a27fb0a5b5d0d1964a56b8799da26678993832605363c1f1e6eacf4a65c57c5395b01a5a1fddbd367509250399d2a8b9e428e99706d
SSDEEP
3072:uPAfzKWcWOvyxbRmy75vTdMuNsv9TdF89MCIFvlsr6:uScWJJAk51NsFf87QvD
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PathRemoveArgsA
PathUnquoteSpacesA
PathFileExistsA
PathQuoteSpacesA
StrRChrA
PathAppendA
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
RegDeleteKeyA
QueryServiceConfigA
CreateServiceA
GetUserNameA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
InitializeSecurityDescriptor
QueryServiceStatusEx
CloseServiceHandle
GetTokenInformation
OpenProcessToken
DeleteService
OpenServiceA
OpenSCManagerA
StartServiceA
ControlService
SetServiceStatus
EnumServicesStatusExA
CharNextA
LoadStringA
CharLowerA
wvsprintfA
LCMapStringA
LCMapStringW
GetTempFileNameA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
lstrlenA
CloseHandle
GetModuleHandleA
WideCharToMultiByte
GetStringTypeExA
GetThreadLocale
lstrcmpA
lstrcmpiA
GetProcAddress
ReadFile
GetFileSize
CreateFileA
WriteFile
DeleteFileA
GetVersionExA
GetCurrentProcess
LoadLibraryA
VirtualQuery
Sleep
GetCurrentProcessId
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
CreateMutexA
MapViewOfFileEx
SetEvent
OpenEventA
GetLastError
MoveFileExA
GetTickCount
GetFileTime
GetVolumeInformationA
CreateFileMappingW
GetExitCodeProcess
lstrlenW
GetComputerNameA
QueryDosDeviceA
GetLogicalDriveStringsA
ExpandEnvironmentStringsA
FreeLibrary
GetModuleFileNameA
GetTempPathA
lstrcpynA
FileTimeToSystemTime
IsBadReadPtr
CreateThread
ExitProcess
CreateEventW
OpenEventW
FreeLibraryAndExitThread
CreateEventA
GetLocaleInfoA
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
HeapFree
RtlLookupFunctionEntry
RtlUnwindEx
GetModuleHandleW
GetCommandLineA
GetStdHandle
HeapSetInformation
HeapCreate
RaiseException
RtlPcToFileHeader
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSize
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
SHGetSpecialFolderPathA
ShellExecuteExA
CoInitialize
StringFromGUID2
CoUninitialize
GetProcessImageFileNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ