DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
471e62e5cfc1a3d86956186f61307f9c7bf416f024659856cd41f78dcce3b5da.dll
Resource
win7-20221111-en
Target
471e62e5cfc1a3d86956186f61307f9c7bf416f024659856cd41f78dcce3b5da
Size
64KB
MD5
8908197f957474eb9d8cbbae53dc52a0
SHA1
a095e0007e2a7b89c06a50a304cc5a71ffc98ef5
SHA256
471e62e5cfc1a3d86956186f61307f9c7bf416f024659856cd41f78dcce3b5da
SHA512
cd05ba44663245105fb8d566c74f988aa076d70429451928efc9a973a1eb6c04aeb8c6db7205d55825841cc52ac6f2cc6b5c118070fbaad0a19ecdf0cec2be5d
SSDEEP
768:cSMzRVIxcjZo3ahqaS1axGRDssqWMyepRAq0/3fQgm2/ejGCtKWDtRBM3ut:chFcLakRDVzGx0/3fQg3ClBR+m
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrlenW
GetShortPathNameA
GetModuleHandleA
ExitProcess
RemoveDirectoryA
GetProcAddress
LoadLibraryA
FreeLibrary
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
HeapDestroy
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
WideCharToMultiByte
WritePrivateProfileStringA
CreateDirectoryA
MoveFileA
CreateThread
Process32Next
Process32First
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenA
MultiByteToWideChar
LocalFree
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
Sleep
GetCommandLineW
DeleteFileA
FindNextFileA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegQueryInfoKeyA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
sprintf
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strcmp
atoi
_access
memcmp
_purecall
memcpy
strstr
??3@YAXPAX@Z
fclose
fread
memset
??2@YAPAXI@Z
ftell
fseek
fopen
strcat
strrchr
_strupr
strncpy
strchr
strncmp
strlen
strcpy
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ