DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
f21f782824f7bf69293ce32dd1c47a273ef440cb09f17e295fbf2cd30f8f5c11.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f21f782824f7bf69293ce32dd1c47a273ef440cb09f17e295fbf2cd30f8f5c11.dll
Resource
win10v2004-20220901-en
Target
f21f782824f7bf69293ce32dd1c47a273ef440cb09f17e295fbf2cd30f8f5c11
Size
57KB
MD5
0ab13ee2a91c7d2dfaac022030620c16
SHA1
5022a8737712db1daa9ddb3322ea3df718553f07
SHA256
f21f782824f7bf69293ce32dd1c47a273ef440cb09f17e295fbf2cd30f8f5c11
SHA512
ec6a1b8023a549ad10ec7909e3d87d3e3f216be444789e4c1a79498e854f6e441eb86a59e9db74d84f3e06bf5320556036e19a0cc22af889907a8f1b924a702a
SSDEEP
1536:qNIKDp4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:Lqp4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ