DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
316e4d1f7d38936e609d4354cb5a6128dcbe12201151f8b87c436d73789ddd87.dll
Resource
win7-20220812-en
Target
316e4d1f7d38936e609d4354cb5a6128dcbe12201151f8b87c436d73789ddd87
Size
64KB
MD5
f70303c0d71573a2f418a67cbd3c9250
SHA1
28974062065e3e7e3196cf490a37353e8c2ee444
SHA256
316e4d1f7d38936e609d4354cb5a6128dcbe12201151f8b87c436d73789ddd87
SHA512
73ee0bb9b5bc72bbd193c32edd111688cdb3effa33deb73d0d33e0d31feaa80dc69fb73f6ac8ea1342ae741e53e4bfa3ed89b1d9177e31280603affbadf254cf
SSDEEP
768:3lksSqSVP4YEZaM5hejKS9LQEHZCxSpr6yPQgWXYiFBmcEuVWi5dhBb/t:11SqSVyaMtS99oy6voivBvzdhR1
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RemoveDirectoryA
Sleep
ExitProcess
LocalFree
GetSystemDirectoryA
GetProcAddress
CreateDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
CreateProcessA
HeapDestroy
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
GetCurrentProcessId
GetCommandLineW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
CreateThread
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
LoadLibraryA
FreeLibrary
Process32First
CloseHandle
Process32Next
InterlockedDecrement
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_access
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strncmp
strncpy
strchr
atoi
fopen
fseek
ftell
strcpy
strstr
memset
strrchr
sprintf
strcat
strlen
??3@YAXPAX@Z
memcmp
memcpy
_strlwr
strcmp
_purecall
??2@YAPAXI@Z
fclose
fread
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ