_GetError@4
_GetErrorText@16
_GetName@12
_LicenseMgrAlert@0
_Start@8
_Stop@4
_UploadWin@16
_UploadWinW@16
Static task
static1
Behavioral task
behavioral1
Sample
72587f476de0445b808904ebfc2dd2fb82cb6ea00f7fbf077879e1a40f94baa4.dll
Resource
win7-20220812-en
Target
72587f476de0445b808904ebfc2dd2fb82cb6ea00f7fbf077879e1a40f94baa4
Size
556KB
MD5
553165162b371227612f2da8357c7447
SHA1
c6ccdb777466e607afe2b25387770da17043720e
SHA256
72587f476de0445b808904ebfc2dd2fb82cb6ea00f7fbf077879e1a40f94baa4
SHA512
795f75ae4f0e110ac0c2cc264ff9b3d29c0ac54dc8cfc0e146bcaf2e1397fba86fdc1adc6408f2199b91006c402cc9daf154b4c816a2158c10810fa506ca56dd
SSDEEP
6144:gEO0Jon0UhR0Slajb7+/ak7gsvkrn+pzOg1QU8vmIkGzTdO7k:8mon0zSwjW/Xgx+peUezw7k
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SHGetFolderPathW
UuidToStringW
UuidCreate
RpcStringFreeW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
LoadLibraryA
LockResource
FindResourceExW
SetLastError
GetModuleFileNameA
GetSystemDefaultLangID
GetUserDefaultLangID
GetComputerNameW
lstrcpynW
lstrcatW
lstrcpyW
MoveFileW
WriteFile
CreateFileW
IsBadWritePtr
GetDateFormatW
GetTimeZoneInformation
GetDriveTypeW
GetDiskFreeSpaceW
QueryDosDeviceW
GetFullPathNameW
GetShortPathNameW
GetTempFileNameW
GetTempPathW
GetWindowsDirectoryW
MoveFileExW
GetProcAddress
OutputDebugStringA
ReadFile
GetFileSize
SetFilePointer
GetFileAttributesExW
FormatMessageA
GetComputerNameA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
GetTickCount
GetPrivateProfileSectionW
lstrcmpiA
ExpandEnvironmentStringsW
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
GetLocaleInfoW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
LeaveCriticalSection
EnterCriticalSection
GetSystemDefaultLCID
IsValidLocale
EnumUILanguagesW
GetCurrentThread
LoadLibraryW
LocalFree
IsBadReadPtr
GetFileAttributesA
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileInformationByHandle
CreateFileA
GetModuleHandleA
IsDBCSLeadByte
WaitForSingleObject
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetFileAttributesW
CreateDirectoryW
CopyFileW
Sleep
DeleteFileW
FindNextFileW
OutputDebugStringW
DebugBreak
lstrlenA
GetSystemTime
SystemTimeToFileTime
OpenProcess
FindFirstFileW
FindClose
GetVersionExW
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrcmpiW
InterlockedIncrement
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CreateEventW
GetLastError
SetEvent
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
InterlockedDecrement
lstrlenW
CloseHandle
GetPrivateProfileSectionNamesW
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
CharNextW
UnregisterClassA
PostMessageW
IsWindow
FindWindowW
CreateWindowExW
GetProcessWindowStation
GetUserObjectInformationA
SetCursor
CharUpperW
CharLowerW
PeekMessageW
MsgWaitForMultipleObjects
LoadStringW
GetWindowLongW
wvsprintfW
wsprintfW
PostQuitMessage
DestroyWindow
DefWindowProcW
RegisterClassW
LoadCursorW
GetDesktopWindow
RegEnumValueW
RevertToSelf
DuplicateTokenEx
ImpersonateLoggedOnUser
ConvertSidToStringSidW
LookupPrivilegeNameW
LookupAccountNameW
GetSidIdentifierAuthority
OpenThreadToken
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
CopySid
IsValidSid
GetLengthSid
GetSecurityDescriptorLength
MakeSelfRelativeSD
InitializeSecurityDescriptor
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
MakeAbsoluteSD
GetSecurityDescriptorControl
GetAclInformation
InitializeAcl
AddAce
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetUserNameA
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegUnLoadKeyW
RegConnectRegistryW
RegLoadKeyW
OpenProcessToken
LookupAccountSidW
GetTokenInformation
RegOpenKeyW
SHCreateDirectoryExW
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromProgID
OleRun
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoCreateGuid
VariantChangeType
SysStringLen
SysAllocString
SysFreeString
VarUI4FromStr
SetErrorInfo
VariantInit
GetErrorInfo
CreateErrorInfo
VariantClear
SHDeleteKeyW
PathFindExtensionA
PathCombineW
PathAppendW
PathFileExistsW
PathFindFileNameA
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?toupper@?$ctype@_W@std@@QBE_W_W@Z
??1locale@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?facet_Register@facet@locale@std@@CAXPAV123@@Z
??1_Lockit@std@@QAE@XZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
atoi
_mbsrchr
_mbsstr
strcpy
_lseek
printf
_close
_write
_strlwr
_snprintf
strcmp
_tempnam
strftime
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
isspace
strpbrk
?_open@@YAHPBDHH@Z
_errno
_localtime64
iswascii
_wtol
swscanf_s
_snprintf_s
iscntrl
_itoa_s
strcat
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_read
_initterm_e
remove
_initterm
??3@YAXPAX@Z
_beginthreadex
__CxxFrameHandler3
??_V@YAXPAX@Z
memcpy
_purecall
memset
malloc
free
memcpy_s
_CxxThrowException
wcsncpy_s
_recalloc
strncpy
_ultow
wcscpy
wcscat
_itow
memmove_s
memcmp
calloc
_snwprintf
??2@YAPAXI@Z
wcsrchr
iswdigit
_wtoi
wcslen
wcsstr
wcsncat
_ltow
_wcsicmp
_invalid_parameter_noinfo
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
_wcsnicmp
wcschr
wcstok_s
wcscpy_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_localtime64_s
_time64
_snwprintf_s
wcsftime
_strnicmp
strlen
strncpy_s
_vsnwprintf_s
_vsnprintf_s
memmove
_vsnwprintf
wcsncpy
_swprintf
vswprintf_s
_vsnprintf
iswspace
wcscmp
wcsncmp
_wcsupr
_wcslwr
_mbschr
isalpha
_mbclen
tolower
_wrename
strchr
strrchr
strstr
strncat
sprintf
sendto
recv
ioctlsocket
connect
closesocket
WSAGetLastError
socket
send
WSAStartup
gethostname
gethostbyname
inet_addr
WSACleanup
htons
InternetQueryDataAvailable
InternetCloseHandle
InternetReadFile
InternetWriteFile
HttpQueryInfoA
InternetGetConnectedState
HttpSendRequestA
HttpOpenRequestA
InternetConnectW
InternetOpenW
InternetCrackUrlW
HttpAddRequestHeadersA
HttpSendRequestExA
HttpEndRequestA
_GetError@4
_GetErrorText@16
_GetName@12
_LicenseMgrAlert@0
_Start@8
_Stop@4
_UploadWin@16
_UploadWinW@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ