ConnectInternet
HookRegister
HookRegisterBrowser
HookUnregister
HookUnregisterBrowser
Static task
static1
Behavioral task
behavioral1
Sample
23695277e30f3290330462e42c9621f7a3ed80eb2f16c7aebfa43ca8e382b3e7.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
23695277e30f3290330462e42c9621f7a3ed80eb2f16c7aebfa43ca8e382b3e7.dll
Resource
win10v2004-20221111-en
Target
23695277e30f3290330462e42c9621f7a3ed80eb2f16c7aebfa43ca8e382b3e7
Size
184KB
MD5
020aee00eae1aee38491c61855a1e77f
SHA1
d7071943dc35787bcad53f3e9ed814ff2e440a28
SHA256
23695277e30f3290330462e42c9621f7a3ed80eb2f16c7aebfa43ca8e382b3e7
SHA512
d236881875ecf33b2134fa1f3bbfe240717f33e5058429d2ab3d746c802263bf96f83d96d15656617cffcfb1ac5c476e557a9dd63560b7e3e180bb869b5ae86e
SSDEEP
3072:iQtI+NRde+ndFXCHSldR7dXrOLFQc6W/RIWjQ4Dzp2Jg11MCQv1a+vwZfk5W8Wd5:icIAq/ICF2M1dQNarZfbL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FindResourceExW
GetComputerNameW
WaitForSingleObject
GetCurrentThread
lstrlenA
CloseHandle
GetComputerNameA
CreateFileW
TerminateProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetEvent
OpenEventW
lstrcmpW
lstrcpyW
MapViewOfFile
FindResourceW
OutputDebugStringW
GetCurrentProcessId
OpenProcess
Sleep
DeleteFileW
MoveFileW
GetLocalTime
CreateDirectoryW
CreateEventW
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LoadResource
LockResource
OpenFileMappingW
SizeofResource
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
VirtualAlloc
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
ExitProcess
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
FlushInstructionCache
GetCurrentProcess
SetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQuery
ReadFile
GetLastError
SetFilePointer
WriteFile
lstrlenW
GetModuleFileNameA
lstrcpyA
CreateFileA
GetFileSize
FileTimeToSystemTime
GetFileType
GetFileInformationByHandle
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
CreateFileMappingW
UnmapViewOfFile
WideCharToMultiByte
MultiByteToWideChar
lstrcatA
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
wsprintfA
wsprintfW
SetWindowsHookExW
UnhookWindowsHookEx
GetParent
GetClassNameW
CallNextHookEx
RegSetValueExA
RegCloseKey
RegOpenKeyExA
SHGetFolderPathA
SHGetFolderPathW
gethostbyaddr
inet_addr
socket
WSAStartup
WSACleanup
gethostname
gethostbyname
inet_ntoa
htons
getservbyname
connect
recv
send
select
setsockopt
getsockname
bind
listen
__WSAFDIsSet
accept
shutdown
closesocket
InternetOpenW
InternetOpenUrlW
InternetReadFile
PathStripPathW
PathFileExistsW
ConnectInternet
HookRegister
HookRegisterBrowser
HookUnregister
HookUnregisterBrowser
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ