DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
f1dfc1aede6c8ef2578218a1a7f020cc38acd2c98f17aadc21475350d2c6c870.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1dfc1aede6c8ef2578218a1a7f020cc38acd2c98f17aadc21475350d2c6c870.dll
Resource
win10v2004-20221111-en
Target
f1dfc1aede6c8ef2578218a1a7f020cc38acd2c98f17aadc21475350d2c6c870
Size
57KB
MD5
43ff4d01a9e9c013833c97e5b2d3157a
SHA1
a1f2877d055fefef13dd7547db05baa6d264ffe1
SHA256
f1dfc1aede6c8ef2578218a1a7f020cc38acd2c98f17aadc21475350d2c6c870
SHA512
0308773c9532d9abf710f0723e3d1021491d528e1081541287942b2622286a0644039efb4323637806fd958f423347e1919841b9bab4919c8f18e651f107e556
SSDEEP
1536:+NIKDv4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:/qv4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ