DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c4c12446bd6f0e218f70e82c1007fad1ef3c8cf3102c13a850b65e671174439c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c4c12446bd6f0e218f70e82c1007fad1ef3c8cf3102c13a850b65e671174439c.dll
Resource
win10v2004-20220901-en
Target
c4c12446bd6f0e218f70e82c1007fad1ef3c8cf3102c13a850b65e671174439c
Size
216KB
MD5
804172a371a62eb185bea104572a6680
SHA1
7340f285d035ee7c01bc9cdedbc4f725eca4632e
SHA256
c4c12446bd6f0e218f70e82c1007fad1ef3c8cf3102c13a850b65e671174439c
SHA512
6cc0bd6576b6f5c40441661353f70a09a14e55f89bd63b2a4da42d9e08beb29b7bbd2a99215ca6405a6b5f6f8a94abb6f7a4d07c50c9f1548b3f161ae509914a
SSDEEP
6144:XeCpIVJqrZ9Aw4K3GDyVoUBKB17ecRWYpUtX:XeCpD9p4OogKB17DD
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__dllonexit
malloc
free
realloc
wcslen
_purecall
_wcsicmp
wcscmp
wcscat
memmove
_wcsnicmp
swprintf
wcschr
wcscpy
_wtol
sprintf
_onexit
_except_handler3
_adjust_fdiv
_initterm
LoadLibraryI
PostMessageI
GetWindowsDirectoryI
_LoadVersionedResourceEx@16
??1CReaderWriterLock3@@QAE@XZ
??0CReaderWriterLock3@@QAE@XZ
?WriteLock@CReaderWriterLock3@@QAEXXZ
?WriteUnlock@CReaderWriterLock3@@QAEXXZ
?ReadOrWriteLock@CReaderWriterLock3@@QAE_NXZ
?ReadOrWriteUnlock@CReaderWriterLock3@@QAEX_N@Z
FXMemAttach
MpGetHeapHandle
FXMemDetach
GetModuleHandleI
LoadLibraryExI
FindResourceI
RegDeleteValueI
lstrcatI
GetModuleFileNameI
LoadStringI
MpHeapAlloc
RegEnumKeyExI
lstrcpynI
lstrlenI
RegSetValueExI
RegOpenKeyExI
RegCreateKeyExI
RegQueryValueExI
RegQueryInfoKeyI
lstrcmpiI
RegDeleteKeyI
MPDeleteCriticalSection
MPInitializeCriticalSection
CharNextI
MpHeapFree
UMSEnterCSWraper
GetVersionExI
lstrcpyI
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
EnterCriticalSection
CompareStringW
LCMapStringW
LCMapStringA
CompareStringA
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
GetUserDefaultLCID
TlsFree
TlsGetValue
TlsSetValue
InterlockedExchange
DisableThreadLibraryCalls
IsBadCodePtr
LoadLibraryA
GetProcAddress
LoadResource
SizeofResource
lstrlenA
FreeLibrary
HeapDestroy
GetCurrentProcess
CloseHandle
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
GetLastError
TlsAlloc
RegCloseKey
CoTaskMemFree
CoTaskMemAlloc
CreateBindCtx
CreateFileMoniker
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoTaskMemRealloc
SysStringLen
SysAllocStringLen
VariantInit
VariantClear
SysAllocString
VariantChangeType
LoadRegTypeLi
SetErrorInfo
VarI4FromStr
CreateErrorInfo
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
GetErrorInfo
OaBuildVersion
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE