DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a8fece1b038da3707f3f3fd412c29065bbf6dacfa3298e5ea60ddf62ff98ff36.dll
Resource
win7-20220812-en
Target
a8fece1b038da3707f3f3fd412c29065bbf6dacfa3298e5ea60ddf62ff98ff36
Size
64KB
MD5
771f1a79773f816cb071767f747e7b10
SHA1
c80c5a54ae297681aa39d367055f714fdf2f32c3
SHA256
a8fece1b038da3707f3f3fd412c29065bbf6dacfa3298e5ea60ddf62ff98ff36
SHA512
082e0d8a5329a58ebec66b0eff49c39dfa88aa38d41fd452316134f55504ddf599808925ac1d2e080b3a9583b86145c8bbdc561b55895f68e5abbfe588b07c62
SSDEEP
1536:Cnes6iXOPVhwTYlh9Lr/4ccIyjAN/MCTNzTxrm:CesxXOtqGrdFA9YLrm
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
CreateProcessA
RemoveDirectoryA
CreateThread
GetCommandLineW
Sleep
FreeLibrary
LoadLibraryA
WideCharToMultiByte
MoveFileA
MultiByteToWideChar
GetProcAddress
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
Process32Next
Process32First
ExitProcess
WritePrivateProfileStringA
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
CreateDirectoryA
LocalFree
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
GetCurrentProcessId
RegSetValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
memcpy
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
strstr
sprintf
memset
strrchr
strcat
??3@YAXPAX@Z
??2@YAPAXI@Z
_access
strlen
strcpy
_stricmp
_purecall
memcmp
strcmp
atoi
strchr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ