DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8a7db7c6a9d7d70109e840a11fdd50a5df03b8da91304f558addc4f61cf1ff28.dll
Resource
win7-20220812-en
Target
8a7db7c6a9d7d70109e840a11fdd50a5df03b8da91304f558addc4f61cf1ff28
Size
64KB
MD5
db4724718c0f21697cc592b4097521c0
SHA1
0f80be3210ba3dd57ef92ad3c1dabd29d7d6bad8
SHA256
8a7db7c6a9d7d70109e840a11fdd50a5df03b8da91304f558addc4f61cf1ff28
SHA512
467bef51d3bb6e3135d52dcfd00dd58f0f3c7ddf090fd1f6640d766d11ac4c3ab5b23039b7334cc072fead2c2ec6c9ceaaeb89cbfa486b91110a16fdbb1aed54
SSDEEP
1536:u72Y5/aCZ1AYe33mJNRGx+E8ijfPUITIp:zK1A0LG4ijf8IT6
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetPrivateProfileStringA
FindFirstFileA
ExitProcess
Sleep
GetProcAddress
CreateDirectoryA
LocalFree
WritePrivateProfileStringA
LeaveCriticalSection
EnterCriticalSection
CreateProcessA
RemoveDirectoryA
GetExitCodeProcess
SetFileAttributesA
GetSystemDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
MoveFileA
DeleteFileA
FindNextFileA
CreateThread
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetCurrentProcessId
Process32First
Process32Next
CloseHandle
LoadLibraryA
GetCommandLineW
FreeLibrary
WaitForSingleObject
RegCreateKeyExA
RegQueryInfoKeyA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_wcslwr
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
strcmp
??2@YAPAXI@Z
atoi
strcpy
??3@YAXPAX@Z
sprintf
memcmp
memcpy
strstr
memset
strrchr
strcat
wcsstr
_strlwr
strncpy
strchr
strncmp
strlen
_access
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ