DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
85d6c3e147849e1fcc89b422bf92099f651e678e5a15287372177b599c65f4c5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85d6c3e147849e1fcc89b422bf92099f651e678e5a15287372177b599c65f4c5.dll
Resource
win10v2004-20220812-en
Target
85d6c3e147849e1fcc89b422bf92099f651e678e5a15287372177b599c65f4c5
Size
57KB
MD5
ba7750459ff0e8016e7434d30fed47f7
SHA1
4a7b2bbee6e4bb5cb810a94668b7229afa9d340e
SHA256
85d6c3e147849e1fcc89b422bf92099f651e678e5a15287372177b599c65f4c5
SHA512
95d9aa014ff42d395fc3554a9ac0d5f288dab355f24b10f0911c290524106e7068aa98e2ef09199447bc5ca6ed482c081d00652370b6a141afe01d61b7eaf23d
SSDEEP
1536:6NIKD94YU6EMyDcqiZZZNihyISFIR6/JP+3CT:bq94YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ