DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2f705d078c212943b581dc1352d158a4eed0735d5dd5c69363066c787dcb1a66.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f705d078c212943b581dc1352d158a4eed0735d5dd5c69363066c787dcb1a66.dll
Resource
win10v2004-20220812-en
Target
2f705d078c212943b581dc1352d158a4eed0735d5dd5c69363066c787dcb1a66
Size
736KB
MD5
4a32c3af536c9edbdab5618ce748cf00
SHA1
110fb12a811e5eb2670fea78a1e5b54d7c805e2c
SHA256
2f705d078c212943b581dc1352d158a4eed0735d5dd5c69363066c787dcb1a66
SHA512
565eb0f7e7ccad649634a27439e5f397304efe68622130603c5d588d9ce0e7c023a206dec1c288aa95a4e6e622beacb300e88a4609ff41707e15455f9cff124e
SSDEEP
6144:xtG2rlD1V7A5+xAqEP/XUaXGJT2N8UCEcDi2qwQfOsqouLIkvrd2kbgDifZCqWRS:xtG2rlL7m7JkT2N8Uss/sxTkg/Hee
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
inet_addr
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEH_WH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringA@@QAE@PBDH@Z
?GenerateG1@CComputerIDGenerator@@QAEKPAE@Z
??0CTXBSTR@@QAE@HPB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??9@YA_NABVCTXStringW@@0@Z
?StringToDWordW@Convert@Util@@YA_NPB_WAAK@Z
??7CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?ToLower@CTXBSTR@@QAEJXZ
?GetClientType@ClientType@ProductConfig@Util@@YAJPAK@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?CreateChannel@Connection@Util@@YAJHPAPAUITXChannel@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?IsCSSubSendData@Misc@Util@@YAHPAUITXData@@@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?GetLCID@TXI18N@@YAKXZ
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?IsDecodeReachEnd@CCmdCodecBase@@IAEHXZ
?DecodeString@CCmdCodecBase@@IAEXPB_WI@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownload@@QAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAV2@H@Z
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?Generate@CComputerIDGenerator@@QAEKPAE@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?ConventAnsiBufferToBSTR@SSOConvert@Util@@YAHAAVCTXBuffer@@AAVCTXBSTR@@H@Z
?GetBuf@CTXCommPack@@QAEHPAPBEHH@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Empty@CTXBSTR@@QAEXXZ
?GetBinDir@Dir@Util@@YA?AVCTXStringW@@XZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?IsFileExist@FS@@YAHPB_W@Z
?Attach@CTXBSTR@@QAEXPA_W@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?GetAt@CTXStringW@@QBE_WH@Z
?Empty@CTXStringW@@QAEXXZ
??YCTXStringW@@QAEAAV0@_W@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?StringToIP@Network@Util@@YAKPB_W@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@XZ
?CreateTXData@SSOData@Util@@YAHPAPAUITXSSOData@@@Z
?CreateTXBuffer@SSOData@Util@@YAHPAPAUITXSSOBuffer@@@Z
??BCTXStringW@@QBEPB_WXZ
?Format@CTXStringW@@QAAXPB_WZZ
?CopyTXDataField@SSOData@Util@@YAHPAUITXSSODataRead@@PAUITXSSOData@@PB_W2@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??8CTXBSTR@@QBE_NPA_W@Z
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
?Random@Sys@Util@@YAHXZ
?GetLCID@NLS@@YAKXZ
?GetTimeOffsetUTC@NLS@@YAJXZ
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
?GetHostByName@HostResolve@Util@@YAJPA_WPAPA_W@Z
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
??0CTXStringW@@QAE@PB_WH@Z
?CancelResolve@HostResolve@Util@@YAJK@Z
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?ChangeConfig@CCmdCodecBase@@IAEXHH@Z
?CreateTXArray@SSOData@Util@@YAHPAPAUITXSSOArray@@@Z
?Length@CTXBSTR@@QBEIXZ
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?InitDownloadTempDirectory@CTXHttpDownload@@SAXPB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??0CTXStringW@@QAE@PB_W@Z
??0CCmdCodecBase@@QAE@XZ
wcslcat
??YCTXStringW@@QAEAAV0@ABV0@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?GetIEProxySetting@Network@Util@@YAHPAUITXData@@AAE@Z
?GetIEProxyUserName@Network@Util@@YAHAAVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetSSOTempDir@Dir@Util@@YA?AVCTXStringW@@XZ
?InitNetwork@Network@Util@@YAHXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?SetConfigFile@TXI18N@@YAHPB_W0@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetRootDir@Dir@Util@@YA?AVCTXStringW@@XZ
?IsEmpty@CTXBSTR@@QAEHXZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXCommPack@@QAE@XZ
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXCommPack@@UAE@XZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
??0CTXStringW@@QAE@PA_W@Z
?GetProcessName@SystemHelp@Util@@YA?AVCTXStringW@@K@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
?ConvertTXSSOBufferToTXBuffer@SSOConvert@Util@@YAJPAUITXSSOBuffer@@PAPAUITXBuffer@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CFmtString@@QAE@XZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??1CFmtString@@QAE@XZ
??8CTXBSTR@@QBE_NABV0@@Z
?ConvertTXSSODataToTXData@SSOConvert@Util@@YAJPAUITXSSOData@@PAPAUITXData@@@Z
?ConvertTXDataToTXSSOData@SSOConvert@Util@@YAJPAUITXData@@PAPAUITXSSOData@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?GetUserDefaultLCID@NLS@@YAKXZ
?SetLCID@NLS@@YAHK@Z
?NotifyIdle@TXTimer@@YAXXZ
?SetUserLCID@TXI18N@@YAXK@Z
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
LCMapStringA
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
Sleep
IsValidCodePage
GetOEMCP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleA
LCMapStringW
HeapDestroy
VirtualAlloc
VirtualFree
GetProcessHeap
GetCommandLineA
CreateThread
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
GetLocaleInfoW
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
lstrlenW
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
RaiseException
GetProcAddress
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
LocalAlloc
LoadLibraryA
CreateDirectoryW
GetCommandLineW
TerminateThread
GlobalAlloc
GlobalFree
GetSystemDirectoryW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetFileAttributesW
LocalFree
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetVersionExW
GetSystemInfo
VirtualQuery
VirtualProtect
ReleaseMutex
WaitForSingleObject
CreateMutexW
OpenMutexW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CloseHandle
GetThreadLocale
SetThreadLocale
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
RegisterClassExW
PostMessageW
SendMessageW
GetDesktopWindow
SendMessageTimeoutW
DestroyWindow
GetWindowLongW
DefWindowProcW
SetWindowLongW
ShowWindow
CreateWindowExW
GetClassInfoExW
UnregisterClassA
GetWindowThreadProcessId
CharNextW
IsWindow
GetStockObject
SetSecurityDescriptorSacl
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SHGetSpecialFolderPathW
StringFromGUID2
CoCreateInstance
CoCreateGuid
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
LoadRegTypeLi
VariantInit
VariantClear
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE