DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
11bd9d0e6bf3a4a08d15f1f318855319bb7d45cc8d3fcadd3a9c489a64b6de82.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
11bd9d0e6bf3a4a08d15f1f318855319bb7d45cc8d3fcadd3a9c489a64b6de82.exe
Resource
win10v2004-20220901-en
Target
11bd9d0e6bf3a4a08d15f1f318855319bb7d45cc8d3fcadd3a9c489a64b6de82
Size
407KB
MD5
3a1e331daccc0b8af556e29f57057a20
SHA1
735842418856e9a86619cf06aa73e9c1a9696b90
SHA256
11bd9d0e6bf3a4a08d15f1f318855319bb7d45cc8d3fcadd3a9c489a64b6de82
SHA512
e1eb1b2cced02c238313dcb253fa58e2fe2767d609666fc22ba47253b3e7e7f590addda711f839f5d88a8c3e4626fe3aa6824c410bcf78107dc3d1663b9ae710
SSDEEP
12288:8qbzInkgslGb4SHe777777777777777777WIPdX4/7ot5r6:2kBMbTHCo/Et
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_WH@Z
??0CTXStringW@@QAE@H@Z
?Delete@CTXStringW@@QAEHHH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?Find@CTXStringW@@QBEH_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Replace@CTXStringW@@QAEH_W0@Z
??ACTXStringW@@QBE_WH@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?Empty@CTXStringW@@QAEXXZ
??0CTXStringW@@QAE@UtagGBK@@PBDH@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
ord34
??YCTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?GetString@CTXStringW@@QBEPB_WXZ
ord33
?Right@CTXStringW@@QBE?AV1@H@Z
??8@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
??4CTXBSTR@@QAEAAV0@PB_W@Z
?Empty@CTXBSTR@@QAEXXZ
?AllocSysString@CTXStringW@@QBEPA_WXZ
ord26
??BCTXStringA@@QBEPBDXZ
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
?Length@CTXBSTR@@QBEIXZ
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?GetCore@CoreCenter@Util@@YAHPA_WPAPAUITXCore@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?InitNetwork@Network@Util@@YAHXZ
?InitPlatformModeConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?ClearDeadQueue@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?GetPlatformCore@CoreCenter@Util@@YAHPAPAUITXPlatformCore@@@Z
?CheckVistaAndStartSelfMediumLevel@Sys@Util@@YAHXZ
?OpenUrlWithTT@UrlBase@Util@@YAHABVCTXStringW@@@Z
?Format@CTXStringW@@QAAXPB_WZZ
??H@YA?AVCTXStringW@@ABV0@0@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??M@YA_NABVCTXStringW@@0@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??0CTXStringW@@QAE@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??1CTXStringA@@QAE@XZ
??0CTXStringW@@QAE@XZ
??9@YA_NABVCTXStringW@@0@Z
??1CTXStringW@@QAE@XZ
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
ReadFile
GetFileSizeEx
CreateFileW
SetEndOfFile
WriteFile
WinExec
GetVersionExW
GetSystemTime
FileTimeToSystemTime
GetProcessTimes
GetCurrentProcess
OutputDebugStringW
GetLastError
RaiseException
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
Sleep
SetThreadLocale
GetThreadLocale
GetCurrentProcessId
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetPrivateProfileIntW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteFileW
RemoveDirectoryW
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
ReleaseMutex
CreateMutexW
IsDebuggerPresent
WaitForSingleObject
GetSystemTimeAsFileTime
LoadCursorW
SetForegroundWindow
ShowWindow
IsIconic
GetClassInfoExW
LoadCursorA
GetClassInfoExA
CharNextW
RegisterClassExW
UnregisterClassW
RegisterClassExA
CreateWindowExW
DefWindowProcW
GetDesktopWindow
GetWindow
IsWindow
GetPropW
SendMessageW
GetStockObject
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyW
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
CoInitialize
CoCreateInstance
SysStringLen
VariantClear
SysAllocString
VariantCopy
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SysFreeString
LoadRegTypeLi
VariantInit
?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
ord68
ord31
ord56
ord49
ord15
ord64
ord32
ord30
ord58
PathFileExistsW
PathRemoveFileSpecW
_crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_initterm
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
memmove_s
_recalloc
swprintf_s
sprintf_s
wcsncpy_s
__argc
__wargv
wcsncpy
malloc
??3@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
__CxxFrameHandler3
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
memset
memmove
_purecall
??_V@YAXPAX@Z
free
memcmp
memcpy
_time64
wcslen
_wtol
_flushall
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE