DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f444695d47e47777b2abfbd10f0ad778b62b8405d3a3487fd503db91469456e3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f444695d47e47777b2abfbd10f0ad778b62b8405d3a3487fd503db91469456e3.dll
Resource
win10v2004-20220812-en
Target
f444695d47e47777b2abfbd10f0ad778b62b8405d3a3487fd503db91469456e3
Size
244KB
MD5
5c3e53d331fbdc764d2ead7e377ee54a
SHA1
4970d0a9a47dd20712c1b4e97a9b0ac835997cad
SHA256
f444695d47e47777b2abfbd10f0ad778b62b8405d3a3487fd503db91469456e3
SHA512
8e7a74c940af582c6742552b2b8b3bd2dfa0eb2e4a140bc914ff978963d386539e20872e8b69ad4256b7972a20fbe45de31dd58e2fe47866de5b826b2b0c3bda
SSDEEP
6144:2xgYFm1yE/DDaVoM+UJV6RhxNQBDOi5uHStL6XZW8Z:2xsP8DlIRqwHStLEIC
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetThreadLocale
GetVersionExA
EnterCriticalSection
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
GetACP
InterlockedExchange
lstrlenW
WideCharToMultiByte
lstrcpyA
lstrcatA
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
RaiseException
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
lstrcmpiA
IsDBCSLeadByte
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
DeviceIoControl
CreateFileA
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
LoadLibraryA
CloseHandle
FindClose
FindNextFileA
FindFirstFileA
GetVolumeInformationW
GetProcAddress
GlobalFree
GlobalAlloc
MoveFileExA
GetLocalTime
CopyFileA
GetShortPathNameA
GetVersion
CharNextA
LoadStringA
CharToOemA
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
InitializeSecurityDescriptor
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
SetSecurityDescriptorDacl
RegQueryValueExA
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
ProgIDFromCLSID
CoTaskMemFree
StringFromGUID2
SysAllocString
CreateErrorInfo
SetErrorInfo
SysAllocStringLen
SysFreeString
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
?create_new@kfile@@QAE_NPBD@Z
?kf_copyEx@kcf@@QAEHPBDPBGPADPAGPAXH4HHHHP6AX2H@ZH@Z
?kf_creat_binaryA@kcf@@QAEHPAUCfHnd@@PAD@Z
?cfx_close@kcf@@QAEHPAUCfHnd@@@Z
?cfx_read@kcf@@QAEHPAUCfHnd@@JPAXI@Z
?kf_open_roA@kcf@@QAEHPAUCfHnd@@PAD@Z
?kf7_deleteA@@YAHPBD@Z
?kf7_chmod_setA@@YAHPBDK@Z
?KLIB_init@@YAXXZ
?read@kfile@@QAE_NPAXK@Z
?cfx_existA@kcf@@QAEHPBD@Z
?is_this_drive_fixed@@YAHK@Z
?seek@kfile@@QAE_NK@Z
?length@kfile@@QAE_NPAK@Z
?write@kfile@@QAE_NPBXK@Z
??1kfile@@QAE@XZ
??0kfile@@QAE@XZ
?open_for_read@kfile@@QAE_NPBD@Z
?new_kfile@@YAPAVkfile@@XZ
?temp_unique@KFolder@@QAEHPAD@Z
?datadir@KFolder@@QAEHPADPBD@Z
?__host_os@@3UHostOs@@A
??0KFolder@@QAE@XZ
?close@kfile@@QAE_NXZ
?is_open@kfile@@QAE_NXZ
?delete_kfile@@YAXAAPAVkfile@@@Z
?zeroset@@YAXPAXI@Z
?reopen@kfile@@QAE_NXZ
??0CRC32c@@QAE@XZ
?tell@kfile@@QAE_NPAK@Z
?fail@kfile@@QAE_NXZ
?reset_fail@kfile@@QAEXXZ
?create_path@KFolder@@SAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?enc@@YAXPAXH@Z
?add@CRC32c@@QAEXPAXI@Z
?get@CRC32c@@QAEKXZ
?__app_standalone@@3HA
?temp@KFolder@@QAEHPADPBD@Z
?user@KFolder@@QAEHPADPBD@Z
?slash@KFolder@@SAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?program@KFolder@@QAEHPADPBD@Z
?diskfreespace@@YAHHPAK00@Z
?cleanup_files@@YA_NPBDPAUcleanup_settings@@PAUcleanup_counter@@@Z
?reset@CRC32c@@QAEXK@Z
PathFindExtensionA
__security_error_handler
__CppXcptFilter
_adjust_fdiv
_initterm
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
memset
strrchr
wcsncmp
wcsstr
_CxxThrowException
_vsnwprintf
__CxxFrameHandler
wcslen
fwrite
fread
fputs
strstr
fgets
_mbsnbcpy
sprintf
fclose
fopen
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_resetstkoflw
malloc
wcsncpy
??_V@YAXPAX@Z
??_U@YAPAXI@Z
realloc
_wcsicmp
_wcslwr
_unlink
_access
_strlwr
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?at@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JHH@Z
?underflow@strstreambuf@std@@MAEHXZ
?pbackfail@strstreambuf@std@@MAEHH@Z
?overflow@strstreambuf@std@@MAEHH@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??1ostrstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
?freeze@strstreambuf@std@@QAEX_N@Z
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE