ASet
CleanupFileNameInPlaceA
DeleteTempFile
DeleteTempFileOnShutdown
HrLPSZCPToBSTR
HriCopyStreamCB
HriCopyStreamToByte
PVDecodeObject
Static task
static1
Behavioral task
behavioral1
Sample
f7ebbb7458b0efe4703ae61185bbd5e77faa21d7ad1102158a10d1156e3e4d7c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f7ebbb7458b0efe4703ae61185bbd5e77faa21d7ad1102158a10d1156e3e4d7c.dll
Resource
win10v2004-20220812-en
Target
f7ebbb7458b0efe4703ae61185bbd5e77faa21d7ad1102158a10d1156e3e4d7c
Size
174KB
MD5
06c0b83cf3af760d003f0030df9df466
SHA1
5c3122bc8207f1acce39223d10bb1dc3f2795627
SHA256
f7ebbb7458b0efe4703ae61185bbd5e77faa21d7ad1102158a10d1156e3e4d7c
SHA512
3f8c861bb1bce3d2c193678ea0d156bb39c4607729344255fb43e322980f9c8038bbe0ce491553bdac50348386f768901b8caaab0579ff1e3dd084048017eb97
SSDEEP
3072:MxXjB1/ACkekGAk5JMD09EjGA73BoGKFI7VMFFa5JfYQlvAriyzEp:YBttk+PI026A94gMHa5lpv1yop
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wprintf
wcsstr
printf
memset
free
exit
_wcslwr
_wcsdup
_ismbblead
_initterm
_exit
_controlfp
_cexit
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
_XcptFilter
PolyDraw
ArcTo
IsWindow
SHGetSpecialFolderLocation
SHCreateDirectoryExW
CommandLineToArgvW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
GetProcAddress
TerminateProcess
GetCurrentProcessId
FindNextFileW
FindFirstFileW
ExitProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
lstrlenW
GetModuleHandleA
ASet
CleanupFileNameInPlaceA
DeleteTempFile
DeleteTempFileOnShutdown
HrLPSZCPToBSTR
HriCopyStreamCB
HriCopyStreamToByte
PVDecodeObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ