DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
936ec582590f1b0fbe9b73ddf5ed1ae8036cd7f49d1cbf67218b3a77c06d0e52.dll
Resource
win7-20220901-en
Target
936ec582590f1b0fbe9b73ddf5ed1ae8036cd7f49d1cbf67218b3a77c06d0e52
Size
60KB
MD5
8a62a7e5a153aca167d972af0279767e
SHA1
e9be575e8fe482bd56b04e381fd7908ead42a993
SHA256
936ec582590f1b0fbe9b73ddf5ed1ae8036cd7f49d1cbf67218b3a77c06d0e52
SHA512
b33e64aac0d2d2fd18c16936a422ae36cb8d17fe3ff30f58f6ff882eb71ae91ad58915716e936c1e2b8a8560e092cb78db7c0be84f70684dafaa2c9f4f690f7f
SSDEEP
1536:c2AK45Xs4eNoirgtNwsYoJ7ZZ45xgLaTk:c1mry7YonZ4YLaA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetSystemDirectoryA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
ExitProcess
MoveFileA
GetModuleFileNameA
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Sleep
RemoveDirectoryA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
SetFileAttributesA
LocalFree
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineW
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
DeleteFileA
WritePrivateProfileStringA
CreateThread
CreateDirectoryA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strrchr
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
_purecall
strchr
atoi
_access
strcmp
memcpy
memcmp
sprintf
??3@YAXPAX@Z
fclose
fread
memset
??2@YAPAXI@Z
ftell
fseek
fopen
strcat
_strupr
strlen
strcpy
strstr
wcsstr
_wcslwr
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ