CreateProcessNotify
DllGetVersion
Static task
static1
Behavioral task
behavioral1
Sample
f26a9e66ae342f45dcada561df14ee68490f9dc0285eeee0eaab14769b4567bf.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f26a9e66ae342f45dcada561df14ee68490f9dc0285eeee0eaab14769b4567bf.dll
Resource
win10v2004-20220812-en
Target
f26a9e66ae342f45dcada561df14ee68490f9dc0285eeee0eaab14769b4567bf
Size
46KB
MD5
525f8521a7e2099d1df2156c8b4519b4
SHA1
6dec86d8459ba316957217ea81f202a874aa580a
SHA256
f26a9e66ae342f45dcada561df14ee68490f9dc0285eeee0eaab14769b4567bf
SHA512
947b40badefbb49065d721bb004089f87e77e013b9f414ab1a55c34e5e1f2b54febe9ce50e89b3ac0ccd0a488d224d7eeb56848e8e01700f418339a093a5c37c
SSDEEP
768:Qodb1f1pjvg3EbvEc0yq8UHbGV0ruPtAfw6JXQg4Xgrd4l1X:n1kCf0d9HqVR1AY6Sg4XPr
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_chkstk
isprint
__isascii
PathIsSlowA
DragQueryPoint
PifMgr_CloseProperties
vsprintf
DllGetVersion
_ftol
CallCPLEntry16
__iscsymf
CtfImmGetGuidAtom
ImmUnlockIMCC
ExtractIconExA
ILIsParent
PathProcessCommand
PathQualify
wcstoul
VirtualQueryEx
lstrcatA
WaitForMultipleObjects
Sleep
CreateFileMappingA
SetThreadLocale
GetThreadLocale
UnmapViewOfFile
SetCurrentDirectoryA
ReadFile
OpenThread
lstrcmpiA
CreateEventA
MapViewOfFile
EnterCriticalSection
CreateFileA
LeaveCriticalSection
InitializeCriticalSection
UnmapViewOfFile
ExitProcess
CreateFileMappingA
MapViewOfFile
SetFilePointer
InterlockedExchangeAdd
CreateProcessNotify
DllGetVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ