DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e9619b1c58680b5c7e2fa73927816862c111f26f0b55a5ba85e4f670b329cc0d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9619b1c58680b5c7e2fa73927816862c111f26f0b55a5ba85e4f670b329cc0d.dll
Resource
win10v2004-20220901-en
Target
e9619b1c58680b5c7e2fa73927816862c111f26f0b55a5ba85e4f670b329cc0d
Size
256KB
MD5
19b3ad591c03b82d14bdad56c6c59400
SHA1
e6231815cc7eb5a093dc24cb60d82b880bb7288d
SHA256
e9619b1c58680b5c7e2fa73927816862c111f26f0b55a5ba85e4f670b329cc0d
SHA512
c9145810899e85378edab645ccc9fd8eb811dff434b57b095e1abd753f09e259f23951dea0dbe06b27d57a4a018f57f3f83d884ce8d2559f07081408c00cd251
SSDEEP
3072:ULeePY+PFOrXgD/L/H/T3oLRdhXesUIzDqQ27K25C/Qe+T6q97kYk8:qSO/DH/T4L7hXe9IzD/lU6d
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_adjust_fdiv
_except_handler3
wcscat
wcscpy
wcstod
wcschr
_wcsicmp
wcslen
_wcsnicmp
memmove
swprintf
sprintf
malloc
_onexit
__dllonexit
_purecall
_initterm
free
lstrcatI
RegEnumKeyExI
lstrlenI
RegSetValueExI
RegCreateKeyExI
RegQueryValueExI
RegDeleteKeyI
lstrcpyI
PostMessageI
RegOpenKeyExI
MpHeapAlloc
LoadStringI
GetWindowsDirectoryI
CharNextI
GetVersionExI
_LoadVersionedResourceEx@16
??1CReaderWriterLock3@@QAE@XZ
??0CReaderWriterLock3@@QAE@XZ
?WriteLock@CReaderWriterLock3@@QAEXXZ
?WriteUnlock@CReaderWriterLock3@@QAEXXZ
?ReadOrWriteLock@CReaderWriterLock3@@QAE_NXZ
?ReadOrWriteUnlock@CReaderWriterLock3@@QAEX_N@Z
GetModuleHandleI
GetModuleFileNameI
UMSEnterCSWraper
LoadLibraryI
FXMemAttach
MpGetHeapHandle
MpHeapFree
MPInitializeCriticalSection
MPDeleteCriticalSection
FXMemDetach
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
EnterCriticalSection
CompareStringW
LCMapStringW
LCMapStringA
CompareStringA
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
GetCurrentProcess
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcessId
GetUserDefaultLCID
TlsFree
TlsAlloc
lstrlenW
GetCurrentThreadId
TlsGetValue
TlsSetValue
InterlockedExchange
LeaveCriticalSection
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
RegCloseKey
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoCreateInstance
VariantInit
SetErrorInfo
VariantChangeType
VariantClear
GetErrorInfo
LoadRegTypeLi
SysStringLen
SafeArrayPutElement
SafeArrayGetElement
VariantCopy
SysAllocString
LoadTypeLi
OaBuildVersion
SysAllocStringLen
CreateErrorInfo
SafeArrayDestroy
SafeArrayCreate
SafeArrayUnlock
SafeArrayCopy
RegisterTypeLi
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE