DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
a4b50788c6551479cf98595b7a4a39bb1a4f0d0ebd6edd5ab5930225bf5224b8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4b50788c6551479cf98595b7a4a39bb1a4f0d0ebd6edd5ab5930225bf5224b8.dll
Resource
win10v2004-20221111-en
Target
a4b50788c6551479cf98595b7a4a39bb1a4f0d0ebd6edd5ab5930225bf5224b8
Size
57KB
MD5
daa0aa109095b26ef2d4617c1f0518db
SHA1
33c0fb3baebc0492fdc5785dd7cc2543fce11963
SHA256
a4b50788c6551479cf98595b7a4a39bb1a4f0d0ebd6edd5ab5930225bf5224b8
SHA512
fe3846745b432ac98fa1e7519db65d4255ef339783ddc47f1b6ceb769dd906f2f3d93a5fe6e7bdaf259e6056f9662786096ca55405e9d7187d07f5784bc3acf5
SSDEEP
1536:eNIKD24YU6EMyDcqiZZZNihyISFIR6/JP+3CT:fq24YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ