DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b6c7a408c7d1f11489a69de5bcc83a99a1e629e380279f8b615935211192bb9a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6c7a408c7d1f11489a69de5bcc83a99a1e629e380279f8b615935211192bb9a.dll
Resource
win10v2004-20220812-en
Target
b6c7a408c7d1f11489a69de5bcc83a99a1e629e380279f8b615935211192bb9a
Size
31KB
MD5
9016f3ff195249b885558dc932980640
SHA1
107d425a12de8765782c9864589ed01833c3641a
SHA256
b6c7a408c7d1f11489a69de5bcc83a99a1e629e380279f8b615935211192bb9a
SHA512
9c5b357d2eb79f722d2d0af2f5f028ed6d309d058f7b8aefdd5b536fef36d1fca6fbdf4fb300562e8ce4ad4f005b1be9c64a704fa0384933c29a82ab04cc2db4
SSDEEP
768:cYGY2y85WJuiLpwG9XvIy+SY0PBpPiELUooytJM0VmEagn:pGY215Wjw6XAylR+EFtJMmmEaC
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
FindResourceW
InterlockedCompareExchange
SwitchToThread
InterlockedExchange
CallWindowProcW
RegQueryInfoKeyW
LPtoDP
CreatePatternBrush
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ