CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVM
SysLogoff
SysLogon
Static task
static1
Behavioral task
behavioral1
Sample
852d2b0224594e9762a231a0101f117f31932a53361581e5f37ba61389b40ea7.dll
Resource
win7-20221111-en
Target
852d2b0224594e9762a231a0101f117f31932a53361581e5f37ba61389b40ea7
Size
564KB
MD5
ea3062480cc1dd4724857c4c216d990c
SHA1
a81b0b824ae4e6ebd4b69db8563d79b1366593ff
SHA256
852d2b0224594e9762a231a0101f117f31932a53361581e5f37ba61389b40ea7
SHA512
6f2b279aebb9c80bb2ce50092f0b85bb4a26bf6cd84a92191b4a1208bcaaf5afcf0a910db6fc2562b93d9531e84dae0e0b013b55ae86373cd9d78a53434d4a48
SSDEEP
12288:PMJKiTKv9+cjWJJ54CFsSj/01gYHr8cyBDY0Y:kJKiTKv9BCJJVsXK9BD7Y
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SHGetFolderPathA
InternetSetCookieA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetSetOptionA
InternetQueryOptionA
InternetCrackUrlA
InternetReadFile
InternetGetConnectedState
InternetCanonicalizeUrlA
InternetOpenA
InternetGetCookieA
InternetOpenUrlA
HttpAddRequestHeadersA
WSACleanup
gethostbyaddr
WSAStartup
GetStringTypeA
SetStdHandle
GetStartupInfoA
GetFileType
GetStdHandle
GetVolumeInformationA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleHandleA
GetModuleFileNameA
CompareStringA
CompareStringW
lstrcpynA
IsDBCSLeadByte
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
CloseHandle
SetEvent
CreateEventA
ReadFile
SetFilePointer
CreateFileA
VirtualFree
VirtualAlloc
GetFileSize
SetFileAttributesA
WriteFile
FreeLibrary
GetProcAddress
LoadLibraryA
ReleaseMutex
WaitForSingleObject
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
MoveFileA
DeleteFileA
OpenEventA
VirtualProtect
FlushInstructionCache
GetCurrentProcess
SetLastError
Sleep
GetCurrentThreadId
LocalFree
LocalAlloc
FormatMessageA
CreateMutexA
GlobalAlloc
InterlockedCompareExchange
SetWaitableTimer
CreateWaitableTimerA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
lstrcatA
OpenMutexA
GetStringTypeW
FreeLibraryAndExitThread
TerminateThread
GetExitCodeThread
CreateThread
SystemTimeToFileTime
GetLocalTime
CopyFileA
GetCurrentProcessId
SetErrorMode
SetUnhandledExceptionFilter
SetEndOfFile
GetWindowsDirectoryA
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
OpenSemaphoreA
CreateDirectoryA
FindCloseChangeNotification
FindClose
CompareFileTime
FindNextFileA
FindFirstFileA
GetFileAttributesA
CreateProcessA
GetTempPathA
GetShortPathNameA
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenFileMappingA
FlushFileBuffers
ExitThread
CancelWaitableTimer
OpenWaitableTimerA
GetTickCount
IsBadReadPtr
GetDiskFreeSpaceExA
SetCurrentDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
GetSystemTime
ExpandEnvironmentStringsA
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetSystemDirectoryA
FreeEnvironmentStringsA
SetHandleCount
QueryPerformanceCounter
GetOEMCP
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
IsBadWritePtr
HeapCreate
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
RtlUnwind
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
ExitProcess
GetParent
GetSystemMetrics
MsgWaitForMultipleObjects
TranslateMessage
PeekMessageA
CreateWindowExA
GetMessageA
DispatchMessageA
PostMessageA
SetWindowPos
GetPropA
SetPropA
CallWindowProcA
DefWindowProcA
FindWindowExA
GetDlgItem
wsprintfA
RemovePropA
GetWindowThreadProcessId
AttachThreadInput
GetActiveWindow
GetFocus
SetActiveWindow
GetForegroundWindow
GetKeyboardLayoutList
GetKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutNameA
LoadStringA
wvsprintfA
CharNextA
SetWindowLongA
RegEnumValueA
RegQueryInfoKeyA
OpenProcessToken
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegDeleteValueA
RegFlushKey
SetNamedSecurityInfoA
SetEntriesInAclA
SetSecurityInfo
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
SHGetFileInfoA
SHGetSpecialFolderPathA
ShellExecuteA
CoUnmarshalInterface
CoMarshalInterface
CreateStreamOnHGlobal
CoTaskMemFree
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
StringFromGUID2
CoSetProxyBlanket
StringFromCLSID
CoGetInterfaceAndReleaseStream
CoCreateInstance
OleRun
VariantInit
VariantClear
SysAllocString
VariantCopy
UnRegisterTypeLi
RegisterTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
GetErrorInfo
SysStringByteLen
SysAllocStringByteLen
SysStringLen
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysFreeString
StrRChrA
PathFileExistsA
StrCmpNIA
StrStrIA
PathFindExtensionA
UrlEscapeA
StrChrA
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVM
SysLogoff
SysLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE