DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2cba92a652856738a613d447d8d7028bf66b078ee4ccb446d5068754e075a7ae.dll
Resource
win7-20221111-en
Target
2cba92a652856738a613d447d8d7028bf66b078ee4ccb446d5068754e075a7ae
Size
800KB
MD5
3b0eeea8b254a48054a66616f29278d0
SHA1
73829aa5ea6bcf62f0db302410c76dc8e853d8a2
SHA256
2cba92a652856738a613d447d8d7028bf66b078ee4ccb446d5068754e075a7ae
SHA512
46fb287442456fd1546a547128efc637d2f001deed02578af10c0775cfc79150f225a58c78869fc9f30bd9c139456223c14b63323fc2c2e8bc15aae3d793f3ab
SSDEEP
24576:Zdtvig4EWCLljkwVABNzleCOEpnDtm6oC2yjrBzJg:Zd5ig4PCLljkwVABNzl3OEpxm6PZjFzy
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
Sleep
CreateProcessA
lstrcmpA
CreateFileA
QueryPerformanceFrequency
CreateEventA
SetFilePointer
ReadFile
SystemTimeToFileTime
GetSystemTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileSize
GetFileTime
CompareStringA
CompareStringW
GetVersionExA
WriteFile
LocalFileTimeToFileTime
DosDateTimeToFileTime
LoadLibraryExA
SearchPathA
FreeLibrary
WaitForSingleObject
GetDiskFreeSpaceA
GetTempPathA
GetWindowsDirectoryA
GetTickCount
GetCurrentProcessId
GetVersion
GetPrivateProfileSectionA
GetShortPathNameA
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
SetEvent
LockResource
LoadResource
SizeofResource
FindResourceA
SetFileAttributesA
RemoveDirectoryA
SetFileTime
GetCurrentProcess
WritePrivateProfileStringA
GetSystemDirectoryA
WinExec
MoveFileExA
IsBadWritePtr
IsBadReadPtr
GetPrivateProfileSectionNamesA
WritePrivateProfileSectionA
OpenEventA
MoveFileA
ResetEvent
DeleteFileA
GetPrivateProfileIntA
CopyFileA
FlushFileBuffers
SetStdHandle
CreateDirectoryA
GetFileAttributesA
FindFirstFileA
lstrcmpiA
FindClose
SetLastError
FindNextFileA
CloseHandle
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
lstrlenW
WideCharToMultiByte
lstrcpyA
MultiByteToWideChar
lstrlenA
GetLastError
LoadLibraryA
TlsGetValue
IsBadCodePtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
LCMapStringW
LCMapStringA
TlsFree
TlsAlloc
GetCommandLineA
ExitThread
TlsSetValue
GetCurrentThreadId
CreateThread
HeapFree
HeapAlloc
RaiseException
RtlUnwind
InterlockedExchange
TerminateProcess
QueryPerformanceCounter
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
VirtualProtect
VirtualQuery
GetCurrentThread
lstrcpynA
GetLocalTime
GetOEMCP
GetACP
GetCPInfo
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
lstrcatA
ExitProcess
LoadStringA
wsprintfA
WaitForInputIdle
CharUpperA
GetDesktopWindow
PostThreadMessageA
PeekMessageA
CharLowerBuffA
DispatchMessageA
TranslateMessage
GetMessageA
MessageBoxA
ExitWindowsEx
MsgWaitForMultipleObjects
GetFileSecurityA
OpenSCManagerA
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
CloseServiceHandle
RegEnumValueA
RegConnectRegistryA
RegDeleteValueA
RegQueryInfoKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
IsValidSecurityDescriptor
SetFileSecurityA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenThreadToken
RegQueryValueA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
CoTaskMemFree
ProgIDFromCLSID
WriteClassStm
OleLoadFromStream
CreateStreamOnHGlobal
StgCreateDocfile
StgOpenStorage
StringFromCLSID
CoLoadLibrary
GetRunningObjectTable
CreateItemMoniker
CoCreateGuid
CLSIDFromString
CoUninitialize
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
StringFromGUID2
OleSaveToStream
LoadTypeLi
RegisterTypeLi
SafeArrayGetDim
SafeArrayCopy
SafeArrayGetUBound
SafeArrayGetLBound
SysAllocStringByteLen
SysStringByteLen
SafeArrayCreate
SafeArrayGetElement
SafeArrayDestroy
SafeArrayPutElement
VariantChangeType
LoadRegTypeLi
SysReAllocStringLen
CreateErrorInfo
SetErrorInfo
VariantInit
VariantCopyInd
VariantCopy
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
VariantClear
GetErrorInfo
UuidFromStringA
UuidCreate
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE