HrGetCertKeyUsage
QueryMemStatus
ReadPixels
RetrieveQoSql
UpdateRebarBandColors
Static task
static1
Behavioral task
behavioral1
Sample
4911b9229d97397acc539cc8c8cdb5b9ca220dff64d2a26f20669e508be58ec4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4911b9229d97397acc539cc8c8cdb5b9ca220dff64d2a26f20669e508be58ec4.dll
Resource
win10v2004-20220812-en
Target
4911b9229d97397acc539cc8c8cdb5b9ca220dff64d2a26f20669e508be58ec4
Size
172KB
MD5
ad5ea66199f87b3a1b53842f4dee09df
SHA1
c8bdaa2b8fa0fd000fb0c27529570ef30e04c9dc
SHA256
4911b9229d97397acc539cc8c8cdb5b9ca220dff64d2a26f20669e508be58ec4
SHA512
8ea0546550180e08bc9bce7aa5598d4265fa7ce1b88edb0459b9ad80009631da848052fd0ee21d2c392179b466fce3224b6a52f612653bfd9f011f8683cb1fd9
SSDEEP
3072:HBySv7I34ZDW0+OcLmcUizZfVRPeFV81eHwBP0zya4WVFVgFGJwZEgBMI/JiHRwl:hZRW0+O1ipPeT8IQh5WrWfEQ/IHhY
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wcschr
towupper
towlower
time
swscanf
strstr
strrchr
strncmp
strncat
strchr
realloc
qsort
printf
memset
mbstowcs
malloc
ldexp
iswxdigit
iswspace
iswprint
iswalpha
iswalnum
isspace
isprint
getenv
ftell
fseek
frexp
free
fprintf
fgetws
fgets
feof
fclose
ctime
atoi
wcsncpy
_wgetenv
_wfopen
_wctime
_wcsupr
_wcsnicmp
_wcslwr
_wcsicoll
_wcsicmp
_wcsdup
_vsnwprintf
_vsnprintf
_time64
_strnicmp
_strlwr
_stricmp
_spawnlp
_snwprintf
_snprintf
_purecall
_onexit
_memicmp
_lseeki64
_lock
_itow
_itoa
_ismbcsymbol
_ismbclower
_isatty
_initterm
_fileno
_errno
_eof
_amsg_exit
__threadhandle
__pioinfo
__doserrno
__dllonexit
__badioinfo
__CxxFrameHandler
_XcptFilter
wcstoul
wctomb
_wsetlocale
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
OpenProcessToken
LsaAddAccountRights
InitializeSecurityDescriptor
InitializeAcl
GetUserNameW
GetLengthSid
FreeSid
CloseEventLog
CheckTokenMembership
AdjustTokenPrivileges
AddAccessAllowedAce
SetSecurityDescriptorRMControl
SHLoadNonloadedIconOverlayIdentifiers
SHGetFolderPathW
SHBindToParent
TerminateProcess
SystemTimeToFileTime
SwitchToFiber
SuspendThread
SleepEx
Sleep
SizeofResource
SetupComm
SetUnhandledExceptionFilter
SetThreadIdealProcessor
SetThreadContext
SetLastError
SetFilePointer
SetEvent
SetEnvironmentVariableA
SetCommTimeouts
SetCommState
SetCommMask
RtlUnwind
ResumeThread
ResetEvent
ReleaseSemaphore
ReadProcessMemory
ReadFile
RaiseException
QueueUserAPC
QueryPerformanceCounter
OutputDebugStringA
OpenProcess
OpenFileMappingW
OpenEventW
MapViewOfFile
TerminateThread
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
IsBadWritePtr
IsBadReadPtr
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapCreate
HeapAlloc
GetVersionExA
GetTickCount
GetThreadTimes
GetThreadSelectorEntry
GetThreadPriority
GetThreadContext
GetTempPathA
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryA
GetProcessTimes
GetProcessHeap
GetProcAddress
GetPriorityClass
GetOverlappedResult
GetModuleHandleA
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQueryEx
WaitCommEvent
WaitForDebugEvent
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WriteFile
WriteProcessMemory
lstrcmpiW
LocalFree
CreateFileMappingA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileTime
ClearCommError
CloseHandle
ConnectNamedPipe
ContinueDebugEvent
ConvertThreadToFiber
CreateDirectoryW
CreateEventA
CreateFiber
CreateFileA
CreateNamedPipeA
CreateSemaphoreA
CreateThread
DebugActiveProcess
DebugBreak
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FreeLibrary
GetCommMask
GetCommModemStatus
GetCommTimeouts
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileSize
GetFileSizeEx
HrGetCertKeyUsage
QueryMemStatus
ReadPixels
RetrieveQoSql
UpdateRebarBandColors
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ