CmdLineCb
Start
sqlite3_csv_init
sqlite3_shathree_init
Static task
static1
Behavioral task
behavioral1
Sample
9169b1b9d1f8cad6cdf85879c92512239cda8fae55b826aee195dea569f14372.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9169b1b9d1f8cad6cdf85879c92512239cda8fae55b826aee195dea569f14372.dll
Resource
win10v2004-20220812-en
Target
9169b1b9d1f8cad6cdf85879c92512239cda8fae55b826aee195dea569f14372
Size
3.9MB
MD5
c028adb173b1b870335a6e986773c023
SHA1
aebbcae4f8d5b8dec683ee1590033be0445f1770
SHA256
9169b1b9d1f8cad6cdf85879c92512239cda8fae55b826aee195dea569f14372
SHA512
105ff0edb4626286576581b1fbdd7f3a52401b826607330a61d1c89d558576e2da67390e18bb432f6faa2e60f277006f94613ae496c75f2f2057d0b8b01e210b
SSDEEP
98304:RX0XB5Ut7jgZFlaqJ9O7Y5b51r/T8DpaX:CXB5U2vwQ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
gethostname
inet_pton
send
recvfrom
recv
sendto
select
__WSAFDIsSet
WSARecv
listen
WSASocketW
shutdown
setsockopt
ioctlsocket
getsockopt
getpeername
WSASend
WSASetLastError
WSAAddressToStringW
WSAGetLastError
ntohl
WSAStartup
WSACleanup
ntohs
htons
htonl
closesocket
bind
FindClose
FindFirstFileA
FindNextFileA
GetTempPathA
Sleep
VirtualQuery
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
FileTimeToSystemTime
GetWindowsDirectoryA
GetVersionExA
GetModuleHandleA
GetTimeZoneInformation
CreateFileW
GetFileSize
SetFilePointer
SetLastError
CreateProcessA
ProcessIdToSessionId
LoadLibraryA
lstrcmpiW
lstrcpyA
lstrcatA
GetLogicalDriveStringsA
QueryDosDeviceA
WTSGetActiveConsoleSessionId
MultiByteToWideChar
WideCharToMultiByte
Process32FirstW
Process32NextW
HeapFree
HeapAlloc
GetProcessHeap
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
GetEnvironmentVariableA
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
FormatMessageA
PostQueuedCompletionStatus
GetQueuedCompletionStatus
SetWaitableTimer
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
TlsGetValue
SleepEx
SetEvent
CreateEventW
CreateIoCompletionPort
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoA
VerSetConditionMask
QueueUserAPC
TerminateThread
WaitForMultipleObjects
TlsFree
TlsAlloc
CreateWaitableTimerA
RaiseException
InitializeCriticalSectionEx
DecodePointer
GetCurrentThreadId
VirtualAlloc
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer
InitializeCriticalSection
FreeLibrary
GetCurrentProcessId
DuplicateHandle
LocalFileTimeToFileTime
GetFileAttributesA
SystemTimeToFileTime
UnmapViewOfFile
GetFileInformationByHandle
CreateFileMappingA
MapViewOfFile
GetTickCount
lstrlenA
K32GetProcessImageFileNameA
FlushFileBuffers
OutputDebugStringW
WaitForSingleObjectEx
GlobalFree
CreateFileMappingW
GetSystemTime
LockFileEx
UnlockFile
HeapDestroy
HeapCompact
LoadLibraryW
HeapReAlloc
DeleteFileW
DeleteFileA
FlushViewOfFile
GetFileAttributesExW
GetDiskFreeSpaceA
HeapSize
HeapValidate
GetVersionExW
GetFileAttributesW
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
GetDiskFreeSpaceW
InterlockedCompareExchange
GetFullPathNameW
HeapCreate
AreFileApisANSI
LoadLibraryExA
VirtualFree
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
GetCPInfo
GetStringTypeW
GetModuleHandleExW
QueueUserWorkItem
IsProcessorFeaturePresent
TryEnterCriticalSection
EncodePointer
GetNativeSystemInfo
GetCurrentThread
SwitchToThread
GlobalAlloc
Process32Next
Process32First
CreateToolhelp32Snapshot
QueryFullProcessImageNameA
lstrcmpiA
ReadProcessMemory
VirtualQueryEx
VirtualProtectEx
GetSystemInfo
OpenProcess
WaitForSingleObject
WriteFile
ReadFile
GetFileSizeEx
CreateFileA
QueryPerformanceCounter
LocalFree
LoadResource
QueryPerformanceFrequency
LockResource
GetLastError
RegisterWaitForSingleObject
GetModuleHandleExA
LocalAlloc
CreateMutexA
FindResourceA
TerminateProcess
OutputDebugStringA
GetCurrentProcess
SizeofResource
CreateThread
CloseHandle
DisableThreadLibraryCalls
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
VirtualProtect
ReleaseSemaphore
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
GetStdHandle
GetFileType
WriteConsoleW
CreateTimerQueueTimer
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetEnvironmentVariableW
MoveFileExW
SetFilePointerEx
ExitThread
ExitProcess
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentDirectoryW
SetStdHandle
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetCurrentDirectoryA
GetProcessAffinityMask
SetThreadAffinityMask
FormatMessageW
DefWindowProcA
GetClassInfoExA
GetDesktopWindow
RegisterClassExA
FindWindowExA
GetClassNameA
IsWindow
SetParent
GetParent
GetWindow
SetFocus
IsWindowVisible
ShowWindow
UpdateWindow
LoadCursorA
GetWindowRect
SetWindowPos
CallWindowProcA
BeginPaint
EndPaint
RegisterWindowMessageW
RegisterShellHookWindow
GetForegroundWindow
GetWindowThreadProcessId
GetMessageA
DispatchMessageA
CloseWindow
GetDC
ReleaseDC
GetAsyncKeyState
GetClientRect
SetCursor
UpdateLayeredWindow
GetCursorPos
GetClassInfoA
SetWindowsHookExA
UnhookWindowsHookEx
MoveWindow
GetWindowTextA
PostMessageA
SendMessageA
TranslateMessage
DestroyWindow
wsprintfW
CreateWindowExA
GetWindowLongA
PtInRect
SetWindowLongA
SetForegroundWindow
UnregisterClassA
GetPixel
CreateCompatibleDC
CreateDCA
GetObjectA
CreateDIBSection
SelectObject
GetDIBits
DeleteObject
DeleteDC
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegCloseKey
CreateProcessAsUserW
OpenProcessToken
SetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptAcquireContextA
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
LookupAccountSidA
ConvertSidToStringSidA
LookupAccountNameA
GetTokenInformation
RegQueryValueExA
RegOpenKeyExA
SHAppBarMessage
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHCreateDirectoryExA
SHGetPathFromIDListA
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoTaskMemFree
CoUninitialize
CoInitializeSecurity
BCryptGetProperty
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptDestroyKey
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpQueryOption
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpAddRequestHeaders
WinHttpSetOption
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpSendRequest
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpQueryHeaders
GetProcessImageFileNameA
GetAdaptersInfo
PathRemoveFileSpecA
PathRemoveFileSpecW
PathFileExistsA
PathStripPathA
PathCombineA
DestroyEnvironmentBlock
CreateEnvironmentBlock
CertGetNameStringA
AcceptEx
GetAcceptExSockaddrs
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectRect
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromFileICM
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
_TrackMouseEvent
CryptCATCatalogInfoFromContext
WinVerifyTrust
WTHelperProvDataFromStateData
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CmdLineCb
Start
sqlite3_csv_init
sqlite3_shathree_init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ