DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6ebbd6e616a8aa1ab91ed5946e431a32b557e88f8b6dcaa149f8bd4b73b8fe28.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ebbd6e616a8aa1ab91ed5946e431a32b557e88f8b6dcaa149f8bd4b73b8fe28.dll
Resource
win10v2004-20220812-en
Target
6ebbd6e616a8aa1ab91ed5946e431a32b557e88f8b6dcaa149f8bd4b73b8fe28
Size
252KB
MD5
0c6d0f4a217c368fb33286f5011511e8
SHA1
edc01555d73dbb2adf9920b30a183b4165e6f455
SHA256
6ebbd6e616a8aa1ab91ed5946e431a32b557e88f8b6dcaa149f8bd4b73b8fe28
SHA512
e618551cb2db3911d50f773f50808ecba72d4b161049e7e4c6298543c40a8242e5445ba12f733d256d5e6cbbc69513a49dc496af7adbb0c537c91d2387d22020
SSDEEP
6144:+B21HRfB8PBIg5Gg8Gg6hess59OJxaUi1c:djB85BMg8GThzs59kxaUi
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NtOpenFile
NtQueryInformationFile
NtClose
RtlInitUnicodeString
VirtualFree
VirtualAlloc
GetProcessHeap
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
HeapFree
InterlockedExchange
GetVersionExA
FormatMessageW
LocalFree
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
LoadLibraryW
SetLastError
GetModuleFileNameW
OutputDebugStringA
DisableThreadLibraryCalls
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
GetDriveTypeW
LoadLibraryA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
DeleteObject
GetObjectW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
DragQueryFileW
CoTaskMemFree
CoCreateInstance
StringFromGUID2
ReleaseStgMedium
CoGetObject
CoTaskMemAlloc
CoTaskMemRealloc
LoadTypeLi
VarBstrCat
SysAllocStringLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ