GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
c46b1a472dd6af97c3907113916d416a21e68712aaa7db64fbabd81c6f241bee.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c46b1a472dd6af97c3907113916d416a21e68712aaa7db64fbabd81c6f241bee.dll
Resource
win10v2004-20220812-en
Target
c46b1a472dd6af97c3907113916d416a21e68712aaa7db64fbabd81c6f241bee
Size
18KB
MD5
166083b34350fe3f3edd3fecfff52abb
SHA1
db4159d6ea57f31af9070521518a615ddfe31199
SHA256
c46b1a472dd6af97c3907113916d416a21e68712aaa7db64fbabd81c6f241bee
SHA512
7a517f070b42ae524f88c9968b89108538ce6c060f6816082395b079b03253407cffd1b4aefc4d86a8eb4038a6c3475734511ed3a329c9e902b71533b47007d6
SSDEEP
384:qd41mcxTFS6dDMNyI9Xm3a7xC+PFqA3OaKgTDiG8BljnW8iwLWPJp:5mcxT/gF923aMUltT5iBNiw2
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetLastError
SetFileTime
GetFileTime
TlsGetValue
_lcreat
lstrcmpiA
GetFullPathNameA
lstrcpyA
_lclose
LocalAlloc
LocalFree
_lopen
_lread
GetLastError
_lwrite
_llseek
DeleteFileA
GetFileSize
FreeLibrary
InterlockedExchangeAdd
GetProcAddress
LoadLibraryW
TlsSetValue
LockResource
LoadResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
GlobalLock
LoadLibraryExW
SetErrorMode
IsDBCSLeadByte
lstrlenA
lstrcmpiW
lstrcmpW
lstrcpyW
lstrlenW
CloseHandle
CreateFileW
GetSystemDirectoryW
GetWindowsDirectoryW
MoveFileW
DeleteFileW
GetFileAttributesW
lstrcpynW
WideCharToMultiByte
TlsFree
TlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnicodeStringToAnsiString
RtlAllocateHeap
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
NlsMbCodePageTag
RtlFreeAnsiString
RtlInitUnicodeString
RtlxUnicodeStringToAnsiSize
_wcsicmp
wcslen
wcsncpy
wcscpy
RtlUnwind
NtQueryVirtualMemory
fofiruxbtkh
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ