DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a41be1ea1975f50646842d1e68049aacfc14c171d432d7a922875e1280f97b53.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a41be1ea1975f50646842d1e68049aacfc14c171d432d7a922875e1280f97b53.dll
Resource
win10v2004-20220812-en
Target
a41be1ea1975f50646842d1e68049aacfc14c171d432d7a922875e1280f97b53
Size
472KB
MD5
eb5278efbad466f1349d8ba186cf1c60
SHA1
0d47cc1632e16975c7f6dc8cdf2351da874ec1fe
SHA256
a41be1ea1975f50646842d1e68049aacfc14c171d432d7a922875e1280f97b53
SHA512
3bb5d87e6b4d905eb21c5d8e07f804c643e491d1b20e7dc7a383261a0d491f6dc4e801fb51d3d19f150a1a3e7c04044a19cb1f68507e99b89d9beabb674c1007
SSDEEP
6144:pulxynobtJ597WObtLEw/Uc+M9vN7h1mWzOUXle+7ejLSvzrzeTrLp:U7yonh5vBjmWzOUXgryvXzwr
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GdipDisposeImage
GdipCloneImage
GdipSetStringFormatMeasurableCharacterRanges
GdipFillRectangleI
GdipDeleteBrush
GdipDeleteGraphics
GdipCreateBitmapFromGraphics
GdipCreateSolidFill
GdipCreateFromHDC
GdipLoadImageFromStream
GdipAlloc
GdipMeasureCharacterRanges
GdipDeleteRegion
GdipCloneStringFormat
GdipResetClip
GdipGraphicsClear
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateRegion
GdipMeasureString
GdipDrawString
GdipDrawLineI
GdipResetWorldTransform
GdipSetInterpolationMode
GdipGetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetPenDashStyle
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipGetRegionBoundsI
GdipFree
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeletePen
GdipCreatePen1
GdipSetSolidFillColor
GdipGetSolidFillColor
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipTranslateWorldTransform
GdipCreateTexture
GdipSetImageAttributesWrapMode
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipEndContainer
GdipBeginContainer2
GdipSetClipRectI
GdipDrawImageI
GdipScaleWorldTransform
GdipGetImageGraphicsContext
timeKillEvent
timeSetEvent
ImmGetProperty
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
ImmNotifyIME
ImmAssociateContext
ImmGetCompositionStringW
HeapFree
lstrcmpW
GlobalAlloc
GlobalLock
LoadLibraryA
HeapAlloc
GetProcAddress
VirtualAlloc
MulDiv
GetProcessHeap
OutputDebugStringW
lstrcatW
ResetEvent
CreateEventW
SetThreadPriority
WaitForSingleObject
CloseHandle
SetEvent
GetCurrentThreadId
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
lstrcmpiW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrcpyW
lstrlenW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
GetACP
DefWindowProcW
ScreenToClient
ClientToScreen
PostMessageW
GetParent
ShowWindow
InvalidateRect
GetCursorPos
ShowCursor
SetFocus
GetFocus
SetCaretPos
GetKeyboardLayout
RegisterClassW
GetAncestor
RegisterWindowMessageW
CharNextW
GetWindowTextW
SetWindowTextW
SetWindowsHookExW
EnumChildWindows
UnhookWindowsHookEx
GetClassInfoExW
wsprintfW
CreateAcceleratorTableW
GetClassNameW
RedrawWindow
DestroyAcceleratorTable
GetDlgItem
IsChild
CallWindowProcW
GetDesktopWindow
InvalidateRgn
FillRect
CallNextHookEx
GetSysColor
GetWindow
RealGetWindowClassW
GetDC
ReleaseDC
GetWindowRgn
SetWindowRgn
GetAsyncKeyState
UnregisterClassW
PostThreadMessageW
ReleaseCapture
SetCapture
SetWindowLongW
SetWindowPos
SendMessageW
GetMessageW
GetWindowTextLengthW
TranslateMessage
DispatchMessageW
PeekMessageW
SetTimer
SetForegroundWindow
SetActiveWindow
BeginPaint
EndPaint
PostQuitMessage
CreateCaret
HideCaret
DestroyCaret
SetCursor
GetActiveWindow
GetCapture
BringWindowToTop
IsWindow
IsWindowVisible
KillTimer
LoadCursorW
GetSysColorBrush
RegisterClassExW
MoveWindow
CreateWindowExW
GetClientRect
DestroyWindow
GetWindowLongW
AdjustWindowRectEx
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
CreateRectRgn
CombineRgn
DeleteObject
EqualRgn
CreateSolidBrush
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
StringFromGUID2
CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
SysStringLen
VarUI4FromStr
VariantClear
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VariantInit
OleCreateFontIndirect
LoadRegTypeLi
DispCallFunc
VarBstrCmp
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysAllocString
SysAllocStringLen
_snprintf
_wcsicmp
wcstoul
_CIfmod
wcslen
_wcsnicmp
_vscwprintf
_vsnwprintf
wcsncpy
_wtoi
wcscmp
ceil
atoi
atof
fputs
isspace
tolower
isalpha
isalnum
strncmp
strchr
memset
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
fprintf
_beginthreadex
realloc
_wsplitpath
_purecall
floor
memmove
_except_handler3
free
malloc
??_U@YAPAXI@Z
??_V@YAXPAX@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
PathFindExtensionW
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@V312@0@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
_FInf
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBG@Z
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?clear@ios_base@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@IAE@V?$allocator@G@1@@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?_Xran@_String_base@std@@QBEXXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ