DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitEntry0
Behavioral task
behavioral1
Sample
dc59cb56371f411b4d9bb0bd470ff8f0dd6d691d7ce87298db6883f37cf2fc26.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc59cb56371f411b4d9bb0bd470ff8f0dd6d691d7ce87298db6883f37cf2fc26.exe
Resource
win10v2004-20220812-en
Target
dc59cb56371f411b4d9bb0bd470ff8f0dd6d691d7ce87298db6883f37cf2fc26
Size
224KB
MD5
2b76654e120996f5d6a7eca2ccaf4cd3
SHA1
33cf25419948b244bc082f1cefd949dc2ac96ec2
SHA256
dc59cb56371f411b4d9bb0bd470ff8f0dd6d691d7ce87298db6883f37cf2fc26
SHA512
24b96e4e7026695ee62b2b92402cbfbb8d205888c195938bd1c16cc7f2c321b8ba66e2d389b124c2f5629c9e484f066f2b2cbce339e8ed6fd4c780054bd15a2f
SSDEEP
3072:LJZ5h3uc6z/TBdSITmxrT7fsVwiMAQHp8EQreRpYlutDlemSLH4x:lZOtz2ITc6Yp8EQreQGB
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sleep
FindVolumeClose
FindNextVolumeW
FindFirstVolumeW
WriteFile
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
TerminateThread
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
ReadFile
MultiByteToWideChar
MoveFileA
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
InitializeCriticalSection
GetWindowsDirectoryA
GetVolumeInformationW
GetVolumeInformationA
GetVersionExA
GetUserDefaultLCID
GetTickCount
GetThreadLocale
GetTempPathA
GetSystemDirectoryA
GetStringTypeExA
GetStdHandle
GetShortPathNameA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetComputerNameA
GetCPInfo
GetACP
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DosDateTimeToFileTime
DeviceIoControl
DeleteFileA
DeleteCriticalSection
CreateMutexA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
CoTaskMemFree
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
IsEqualGUID
IsEqualGUID
CoTaskMemFree
StringFromCLSID
CreateErrorInfo
GetErrorInfo
SetErrorInfo
RegisterTypeLib
LoadTypeLib
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
Shell_NotifyIconW
CreateWindowExA
UnregisterClassA
SetWindowLongA
SetTimer
SetForegroundWindow
RegisterClassA
PostThreadMessageA
PostMessageA
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
LoadStringA
LoadIconA
KillTimer
GetWindowLongA
GetSystemMetrics
GetForegroundWindow
GetClassInfoA
DestroyWindow
DefWindowProcA
CharNextA
CharUpperBuffA
CharToOemA
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
InternetCrackUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitEntry0
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE