HrGetCertKeyUsage
QueryMemStatus
ReadPixels
RetrieveQoSql
UpdateRebarBandColors
Static task
static1
Behavioral task
behavioral1
Sample
2d2f8d2217fb4af4fa76d442d985178fb2f57da8b063ed5c36dd6a7e2caa26cc.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2d2f8d2217fb4af4fa76d442d985178fb2f57da8b063ed5c36dd6a7e2caa26cc.dll
Resource
win10v2004-20220812-en
Target
2d2f8d2217fb4af4fa76d442d985178fb2f57da8b063ed5c36dd6a7e2caa26cc
Size
188KB
MD5
27a7232bc2180e20b79cc738f6e45ae0
SHA1
79aaff8d9247014adc470390a22230b7d6b0c4fd
SHA256
2d2f8d2217fb4af4fa76d442d985178fb2f57da8b063ed5c36dd6a7e2caa26cc
SHA512
4ede7b3088da816ad4a8a8f26948f003dd03206f869f5797720174feb5280ee894c1e3098a6319fcfb3f55c4aefff248716ac57e59264a65e13643509c0e94c4
SSDEEP
3072:oJxrEf2sPtLXfOveibRa3lAjd9J3F1AqpvJzreQkebVwZEgBMzBPpi2:+rEesPpfWeibwgT3zyBEL
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wcschr
towupper
towlower
time
swscanf
strstr
strrchr
strncmp
strncat
strchr
realloc
qsort
printf
memset
mbstowcs
malloc
ldexp
iswxdigit
iswspace
iswprint
iswalpha
iswalnum
isspace
isprint
getenv
ftell
fseek
frexp
free
fprintf
fgetws
fgets
feof
fclose
ctime
atoi
wcsncpy
_wgetenv
_wfopen
_wctime
_wcsupr
_wcsnicmp
_wcslwr
_wcsicoll
_wcsicmp
_wcsdup
_vsnwprintf
_vsnprintf
_time64
_strnicmp
_strlwr
_stricmp
_spawnlp
_snwprintf
_snprintf
_purecall
_onexit
_memicmp
_lseeki64
_lock
_itow
_itoa
_ismbcsymbol
_ismbclower
_isatty
_initterm
_fileno
_errno
_eof
_amsg_exit
__threadhandle
__pioinfo
__doserrno
__dllonexit
__badioinfo
__CxxFrameHandler
_XcptFilter
wcstoul
wctomb
_wsetlocale
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
OpenProcessToken
LsaAddAccountRights
InitializeSecurityDescriptor
InitializeAcl
GetUserNameW
GetLengthSid
FreeSid
CloseEventLog
CheckTokenMembership
AdjustTokenPrivileges
AddAccessAllowedAce
SetSecurityDescriptorRMControl
SHLoadNonloadedIconOverlayIdentifiers
SHGetFolderPathW
SHBindToParent
TerminateProcess
SystemTimeToFileTime
SwitchToFiber
SuspendThread
SleepEx
Sleep
SizeofResource
SetupComm
SetUnhandledExceptionFilter
SetThreadIdealProcessor
SetThreadContext
SetLastError
SetFilePointer
SetEvent
SetEnvironmentVariableA
SetCommTimeouts
SetCommState
SetCommMask
RtlUnwind
ResumeThread
ResetEvent
ReleaseSemaphore
ReadProcessMemory
ReadFile
RaiseException
QueueUserAPC
QueryPerformanceCounter
OutputDebugStringA
OpenProcess
OpenFileMappingW
OpenEventW
MapViewOfFile
TerminateThread
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
IsBadWritePtr
IsBadReadPtr
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapCreate
HeapAlloc
GetVersionExA
GetTickCount
GetThreadTimes
GetThreadSelectorEntry
GetThreadPriority
GetThreadContext
GetTempPathA
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryA
GetProcessTimes
GetProcessHeap
GetProcAddress
GetPriorityClass
GetOverlappedResult
GetModuleHandleA
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQueryEx
WaitCommEvent
WaitForDebugEvent
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WriteFile
WriteProcessMemory
lstrcmpiW
LocalFree
CreateFileMappingA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileTime
ClearCommError
CloseHandle
ConnectNamedPipe
ContinueDebugEvent
ConvertThreadToFiber
CreateDirectoryW
CreateEventA
CreateFiber
CreateFileA
CreateNamedPipeA
CreateSemaphoreA
CreateThread
DebugActiveProcess
DebugBreak
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FreeLibrary
GetCommMask
GetCommModemStatus
GetCommTimeouts
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileSize
GetFileSizeEx
HrGetCertKeyUsage
QueryMemStatus
ReadPixels
RetrieveQoSql
UpdateRebarBandColors
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ