DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
34a00d3ea5107643d7734988165ac2bb91476b09c913d26dcf468b86f21fed54.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
34a00d3ea5107643d7734988165ac2bb91476b09c913d26dcf468b86f21fed54.dll
Resource
win10v2004-20220901-en
Target
34a00d3ea5107643d7734988165ac2bb91476b09c913d26dcf468b86f21fed54
Size
286KB
MD5
e1f9b13fdf741fb3107c05dcc72b0b3c
SHA1
bc0b5ec86208d233b4dbf3f640e603f5566bff54
SHA256
34a00d3ea5107643d7734988165ac2bb91476b09c913d26dcf468b86f21fed54
SHA512
2b8fdb071600abbbf833d42b4ffc9f188d76eb6b50064c08c120fa44d4ad1f5e49b85db69b3fa1e7dae04781ad864f3cc6ce6c2fa0d17216907a2e4be250fe66
SSDEEP
6144:DA6RfKe1KgGVCg+51qJcGHTc3E3cUs/e6mqXey/Pp/Iul5Cl8Y:DA6JKeUkg+5+BHTc3E3cUsmXqXH/B/t4
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_wcsnicmp
_wcsicmp
wcsncmp
iswspace
iswxdigit
bsearch
memset
_vsnwprintf
??1type_info@@UAE@XZ
memcpy
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
_CxxThrowException
free
_callnewh
malloc
iswalpha
wcschr
swscanf
UnmapViewOfFile
GetVersionExW
CreateFileMappingW
GetSystemDefaultUILanguage
LoadLibraryExW
FindResourceExW
LoadResource
DelayLoadFailureHook
FindResourceW
SearchPathW
MapViewOfFile
SetUnhandledExceptionFilter
GetSystemDefaultLCID
VerSetConditionMask
VerifyVersionInfoW
SetLastError
WriteFile
GetStringTypeW
CompareStringW
WideCharToMultiByte
MultiByteToWideChar
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
Sleep
InterlockedExchange
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
LoadLibraryA
InterlockedCompareExchange
FreeLibrary
GetDateFormatW
GetTimeFormatW
LocalFree
LocalAlloc
CreateFileW
GetFileTime
CloseHandle
CompareFileTime
CreateDirectoryW
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetUserDefaultUILanguage
lstrcmpW
lstrlenW
IsValidLocale
GetUserDefaultLCID
GetLastError
GetProcAddress
GetModuleHandleW
GetLocalTime
GetLocaleInfoW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
CoTaskMemFree
PropVariantCopy
CoCreateInstance
CoTaskMemAlloc
OleSaveToStream
OleLoadFromStream
PropVariantClear
VarDateFromStr
VarNumFromParseNum
VarParseNumFromStr
VarI4FromStr
SysStringLen
SysFreeString
SysAllocStringLen
VariantCopy
VariantInit
SysAllocString
VarBstrFromDate
VarDateFromUdate
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
VariantClear
VarUdateFromDate
LPSAFEARRAY_UserUnmarshal
SHGetFolderPathW
ord212
ord219
ord184
SHCreateStreamOnFileW
SHRegGetValueW
GetKeyboardLayout
LoadStringW
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
NdrStubCall2
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrStubForwardingFunction
CStdStubBuffer_IsIIDSupported
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ