DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
5b4e7759286cabb994e44590fefa5a0494293f266d314e13571de11ff0f4dded.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5b4e7759286cabb994e44590fefa5a0494293f266d314e13571de11ff0f4dded.dll
Resource
win10v2004-20221111-en
Target
5b4e7759286cabb994e44590fefa5a0494293f266d314e13571de11ff0f4dded
Size
57KB
MD5
b82d502597e05cbcf4a03968f787f6b5
SHA1
08da986ce7ca2ceff5c1f36e6d596e96a312eeec
SHA256
5b4e7759286cabb994e44590fefa5a0494293f266d314e13571de11ff0f4dded
SHA512
27dae5d9998f25b56a90f0f553332785a584f80d44bef36bfebfe8b075df88cc36a3c2f1d56b283f8e5b830fa568ecf498b34db400a2c5f153ea8c8f078757cd
SSDEEP
1536:VNIKDp4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:Aqp4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ