DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
6197274bf9b28673ca441064fa69cc272c6440ac013b59440b0441bec6e59323.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6197274bf9b28673ca441064fa69cc272c6440ac013b59440b0441bec6e59323.dll
Resource
win10v2004-20220812-en
Target
6197274bf9b28673ca441064fa69cc272c6440ac013b59440b0441bec6e59323
Size
57KB
MD5
e4bc0ba820780435e996bb4575a4098b
SHA1
45c2d4e5a32e9855bfb50bcbac253a5bdbe3e8ea
SHA256
6197274bf9b28673ca441064fa69cc272c6440ac013b59440b0441bec6e59323
SHA512
f8b22a2aea0260f534f5924b386f6a1d40cbc8c6b8cc6e53f80f019bf83b3ba3dab8edc9ed50a732938c0e1ec4e4f6b634d821b48ebb5efe860ae75058db7824
SSDEEP
1536:eNIKD84YU6EMyDcqiZZZNihyISFIR6/JP+3CT:fq84YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ