DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
6764e4ab57ee99091bb8c6ccd561c8e33a177c6db0b09297fa9b4a8bcf4b8397.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6764e4ab57ee99091bb8c6ccd561c8e33a177c6db0b09297fa9b4a8bcf4b8397.dll
Resource
win10v2004-20221111-en
Target
6764e4ab57ee99091bb8c6ccd561c8e33a177c6db0b09297fa9b4a8bcf4b8397
Size
57KB
MD5
f128adbf4ca2f9035e7d32f4c9aef6ed
SHA1
f8481f48410f415dfdcc5fac95e69614d831d855
SHA256
6764e4ab57ee99091bb8c6ccd561c8e33a177c6db0b09297fa9b4a8bcf4b8397
SHA512
ec5bfea05306172dc24fe33bf80f236ab26b06f180d659ec84223cdc18af1230f4742a273005417b5c6e2503ec64cf00eded32fc8c3518ebaa99ed7867ffcf61
SSDEEP
1536:ANIKD94YU6EMyDcqiZZZNihyISFIR6/JP+3CT:Vq94YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ