DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1ab4b6f4e3e7de0a07101c0a76b9ecd4bc462270dae6a9f3826cbbc91352ba45.dll
Resource
win7-20220812-en
Target
1ab4b6f4e3e7de0a07101c0a76b9ecd4bc462270dae6a9f3826cbbc91352ba45
Size
64KB
MD5
f5fe4cee923bff279a09f30290f97100
SHA1
59bf6a67abfe637fcf7691c04b222662f35da35f
SHA256
1ab4b6f4e3e7de0a07101c0a76b9ecd4bc462270dae6a9f3826cbbc91352ba45
SHA512
c73985282245505125da3404029618fe5ec87455ef0bdc9b9bd4aba117854730714c3944dcc5f706d65bade4fdb600d672ca390befdc470542eb3ed31fb60ea4
SSDEEP
1536:PczXx0u4mpCBpl5r+ZmOJeulN28BXcxWb:u4mpCLr4JXlN2SXl
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenW
GetShortPathNameA
GetModuleHandleA
Sleep
WideCharToMultiByte
FreeLibrary
DisableThreadLibraryCalls
GetProcAddress
GetCurrentProcessId
LocalFree
CreateProcessA
GetSystemDirectoryA
GetCommandLineW
RemoveDirectoryA
MoveFileA
GetExitCodeProcess
WaitForSingleObject
WritePrivateProfileStringA
CreateThread
lstrlenA
MultiByteToWideChar
CreateDirectoryA
Process32First
Process32Next
SetFileAttributesA
ExitProcess
CloseHandle
EnterCriticalSection
LeaveCriticalSection
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
GetModuleFileNameA
FindNextFileA
LoadLibraryA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strcpy
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
strcmp
strrchr
strstr
sprintf
??3@YAXPAX@Z
atoi
strchr
strlen
memset
strcat
_stricmp
_access
memcpy
_purecall
??2@YAPAXI@Z
memcmp
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ