DllCanUnloadNow
DllGetClassObject
IAlloc
InitializeDll
Static task
static1
Behavioral task
behavioral1
Sample
f8287e85297422e83fe8058151ee908548745ce9056ac0678ce93e9589207242.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8287e85297422e83fe8058151ee908548745ce9056ac0678ce93e9589207242.dll
Resource
win10v2004-20220812-en
Target
f8287e85297422e83fe8058151ee908548745ce9056ac0678ce93e9589207242
Size
2.0MB
MD5
091bad751e9f4f91f058e16b4a128c5b
SHA1
cbdea9dd1f8d3f6e6f677a9a63d8200bdbba0b2a
SHA256
f8287e85297422e83fe8058151ee908548745ce9056ac0678ce93e9589207242
SHA512
1811e53655f38c4f399b50e070c8cd9ec188a3a6a4df71bafc37ab414e3ebf23b76a0d08792b17a8a512c3380d8f231dd6e213ec950eaffba09f242f7aa9f206
SSDEEP
49152:iTMFgRA0I9pDM0SuG7LIqdU+bGgjei+Xkv0dZ:M0BJbSLIm6gjn+M0
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
getsockopt
htons
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
sendto
setsockopt
recv
send
connect
socket
WSACleanup
gethostbyaddr
gethostbyname
WSAStartup
closesocket
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
WNetGetConnectionA
DeleteFileA
Sleep
WideCharToMultiByte
GetTempFileNameA
GetTempPathA
GetCommandLineA
MultiByteToWideChar
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
lstrlenA
lstrcmpiA
LockResource
LoadResource
SizeofResource
FindResourceA
IsDBCSLeadByte
DisableThreadLibraryCalls
GetCurrentProcessId
LoadLibraryExA
MoveFileA
GetFileSize
GetFileAttributesW
GetDriveTypeA
QueryDosDeviceA
FileTimeToLocalFileTime
FileTimeToSystemTime
VirtualProtect
SystemTimeToFileTime
GetSystemTime
GetCurrentThreadId
FindClose
FindNextFileA
SetFilePointer
FindFirstFileA
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
GetLocaleInfoA
GetTimeFormatA
GetLocalTime
GetSystemDirectoryA
GetCurrentProcess
GetComputerNameA
DuplicateHandle
OpenProcess
FlushInstructionCache
VirtualQuery
IsBadStringPtrA
QueryPerformanceFrequency
QueryPerformanceCounter
SetConsoleTitleA
GetConsoleTitleA
GetVersionExA
AreFileApisANSI
LockFile
LockFileEx
UnlockFile
UnlockFileEx
LoadLibraryW
GetSystemTimeAsFileTime
LocalFree
FormatMessageA
FormatMessageW
SetEndOfFile
GetTempPathW
GetFileAttributesA
DeleteFileW
GetFileAttributesExW
GetFullPathNameA
GetACP
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileW
GetSystemInfo
OutputDebugStringA
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
TryEnterCriticalSection
LocalReAlloc
GetTimeZoneInformation
GetFileTime
SetFileTime
ResetEvent
GetModuleHandleW
GetModuleFileNameW
GetNumberFormatA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
GetProcessHeap
TerminateProcess
VirtualAlloc
ResumeThread
GetThreadContext
SetThreadContext
SuspendThread
PostQueuedCompletionStatus
GetQueuedCompletionStatus
ReadDirectoryChangesW
CreateIoCompletionPort
ReleaseMutex
CreateMutexA
SetLastError
SystemTimeToTzSpecificLocalTime
ExitThread
RtlUnwind
DecodePointer
EncodePointer
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThread
GetStdHandle
GetLocaleInfoW
IsProcessorFeaturePresent
ExitProcess
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapSize
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
CreateFileMappingA
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
CreateFileA
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
WaitForMultipleObjects
GetOverlappedResult
PeekNamedPipe
WriteFile
FlushFileBuffers
ReadFile
GetDriveTypeW
SetStdHandle
GetFileType
SetHandleCount
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
DisconnectNamedPipe
ConnectNamedPipe
GetVersion
LoadLibraryA
GetProcAddress
LocalAlloc
FreeLibrary
CreateNamedPipeA
SetEvent
WaitForSingleObject
CloseHandle
GetTickCount
CallNamedPipeA
GetLastError
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
CreateThread
HeapReAlloc
GetDateFormatA
FindFirstFileExA
GetEnvironmentStringsW
GetFileInformationByHandle
GetCurrentDirectoryW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetFullPathNameW
LCMapStringW
SetCursor
FindWindowA
IsZoomed
EnumWindows
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
DestroyWindow
UnregisterClassA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
CharPrevA
GetUserObjectInformationA
SetThreadDesktop
SetProcessWindowStation
CloseDesktop
CloseWindowStation
GetKeyState
GetKeyboardLayoutNameA
GetWindowThreadProcessId
GetCursorPos
MoveWindow
GetFocus
CallNextHookEx
PostMessageA
UnhookWindowsHookEx
SetWindowsHookExA
SetPropA
GetPropA
CallWindowProcA
SetWindowLongA
RemovePropA
IsWindowEnabled
SendMessageA
LoadStringA
wsprintfW
CharNextA
SetTimer
IsWindow
SendMessageTimeoutA
KillTimer
RegisterWindowMessageA
GetWindow
GetForegroundWindow
GetParent
FindWindowExA
IsWindowVisible
GetWindowLongA
GetClassNameA
DefWindowProcA
GetWindowTextA
MapVirtualKeyA
wsprintfA
EnumChildWindows
GetDeviceCaps
GetStockObject
TranslateCharsetInfo
AllocateAndInitializeSid
SetSecurityDescriptorSacl
InitializeAcl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryInfoKeyW
RegEnumKeyExA
RegQueryValueExA
GetLengthSid
GetUserNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
SHGetFolderPathA
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
VariantCopy
VariantInit
VariantClear
SysAllocString
VarUI4FromStr
LoadTypeLi
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringLen
SysStringLen
LoadRegTypeLi
SysFreeString
DllCanUnloadNow
DllGetClassObject
IAlloc
InitializeDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ