GetLspGuid
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
c1bee37a1b36bf0277f6b97a0c06e40963d6dfe8642677e0df01366ebde2dbad.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1bee37a1b36bf0277f6b97a0c06e40963d6dfe8642677e0df01366ebde2dbad.dll
Resource
win10v2004-20220812-en
Target
c1bee37a1b36bf0277f6b97a0c06e40963d6dfe8642677e0df01366ebde2dbad
Size
915KB
MD5
066c9229aaf7d9336efdf6253a582150
SHA1
0991630ee9d9c8f3ede0984f0595a42230d7959f
SHA256
c1bee37a1b36bf0277f6b97a0c06e40963d6dfe8642677e0df01366ebde2dbad
SHA512
6fb05655a83a9a6a8655c351dbc2b6664b8a350663a14183b2272a5e135dbd37c7f2ce9b2bcdd6e325d06af28e3c35c047df712b19a0377c11dc08bc01d5c202
SSDEEP
12288:5saDxRv9OjVrhWrTMHU9S/gbjD9jSg1cElgbo3GNkxkCyEAdMbsRMN/AEYuJ4AWp:5s+ErWMHU9DhtCWg2xAEdNUfJTA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WSACleanup
WSASetLastError
WSCGetProviderPath
WSAGetLastError
WSAStartup
WSCInstallProvider
htons
send
ioctlsocket
connect
gethostbyname
closesocket
getsockopt
recv
select
WSCEnumProtocols
WPUCompleteOverlappedRequest
WSCDeinstallProvider
WSCWriteProviderOrder
UuidCreate
StringFromGUID2
ord67
ord44
ord180
SetEndOfFile
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
InterlockedExchange
VirtualAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
GetConsoleMode
GetConsoleCP
VirtualQuery
GetProcessHeap
LCMapStringW
CloseHandle
GetLastError
GetExitCodeThread
WaitForSingleObject
LeaveCriticalSection
CreateThread
CreateEventA
EnterCriticalSection
ExitThread
SetEvent
GetCurrentProcessId
ResetEvent
InterlockedIncrement
DebugBreak
GetVersionExA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsA
GetSystemDirectoryA
CreateSemaphoreA
GetSystemInfo
CreateIoCompletionPort
WaitForMultipleObjectsEx
PostQueuedCompletionStatus
ReleaseSemaphore
WaitForSingleObjectEx
GetQueuedCompletionStatus
lstrcpyW
OutputDebugStringA
HeapAlloc
HeapFree
CompareStringA
HeapDestroy
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
ExpandEnvironmentStringsW
InterlockedDecrement
DeleteCriticalSection
TlsFree
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
ReleaseMutex
GetModuleFileNameA
GetCurrentThreadId
WaitForMultipleObjects
CreateMutexA
GetModuleHandleA
ResumeThread
LocalFree
FormatMessageA
GlobalMemoryStatusEx
GetDriveTypeA
GetDiskFreeSpaceExA
GetLogicalDriveStringsA
GetUserGeoID
GetOEMCP
GetThreadLocale
GetLocaleInfoA
GetNativeSystemInfo
IsWow64Process
GetTempPathA
SetEnvironmentVariableA
GetCurrentDirectoryA
GetCurrentProcess
SetLastError
WriteFile
CreateFileA
LoadLibraryExA
SystemTimeToFileTime
GetSystemTime
LCMapStringA
SetFilePointer
ReadFile
SetConsoleCtrlHandler
GetTickCount
QueryPerformanceCounter
VirtualFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentThread
IsValidCodePage
GetCPInfo
GetACP
FatalAppExitA
CompareStringW
HeapCreate
GetFullPathNameA
ExitProcess
GetModuleHandleW
IsBadReadPtr
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
GetModuleFileNameW
WriteConsoleW
GetFileType
GetStdHandle
IsDebuggerPresent
RaiseException
lstrlenA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetHandleCount
GetStartupInfoA
HeapValidate
LoadStringA
IsWindow
wvsprintfA
wsprintfA
PostQuitMessage
DefWindowProcA
RegisterClassA
CreateWindowExA
GetSystemMetrics
TranslateMessage
DispatchMessageA
DestroyWindow
UnregisterClassA
PostMessageA
GetMessageA
GetTokenInformation
OpenProcessToken
SHGetFolderPathA
ord680
GetLspGuid
WSPStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ