DllCanUnloadNow
FilterCreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
d82b34dda19f8f40894c05c89cff03a781a04364c872a6690db49042c8d66a70.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d82b34dda19f8f40894c05c89cff03a781a04364c872a6690db49042c8d66a70.dll
Resource
win10v2004-20220901-en
Target
d82b34dda19f8f40894c05c89cff03a781a04364c872a6690db49042c8d66a70
Size
65KB
MD5
70c841e62b372ce35c01e4c35326a5c7
SHA1
260d6770699dc1533e06effa10ebd5fbad0352c5
SHA256
d82b34dda19f8f40894c05c89cff03a781a04364c872a6690db49042c8d66a70
SHA512
6e3cb3251e3cb9c7cabce99ab716cf8749aaae927b9183882e2accada86b66ed749919e0052667db59dad0852e8145f0450202896b64336f873b0093f3398786
SSDEEP
1536:g+r9MFgShA1QrAXxmsiksQUfd3hau3Ei5+iqvrguL:79ggwBsXs7/hauUiQj
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
realloc
_setjmp3
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
free
malloc
getenv
sscanf
_snprintf_s
_iob
fprintf
exit
memcpy
memset
??3@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
longjmp
_purecall
InitializeCriticalSectionAndSpinCount
GetLastError
GlobalDeleteAtom
GlobalAddAtomA
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenA
DeleteCriticalSection
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
ReleaseStgMedium
UnionRect
GetObjectW
CreateSolidBrush
DeleteObject
GetNearestColor
SetDIBColorTable
GetNearestPaletteIndex
SetMapMode
GetCurrentObject
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
SelectPalette
SetDIBits
SelectObject
PatBlt
DllCanUnloadNow
FilterCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ