DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
b5894f0cc892f6867123aadeee5728d30430746f15414a17d850bccc8d54c57d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5894f0cc892f6867123aadeee5728d30430746f15414a17d850bccc8d54c57d.dll
Resource
win10v2004-20221111-en
Target
b5894f0cc892f6867123aadeee5728d30430746f15414a17d850bccc8d54c57d
Size
57KB
MD5
382ad82f55148670d0602848e8698e10
SHA1
06410a0228451cbd6f04f73cc3fce9f59925d7aa
SHA256
b5894f0cc892f6867123aadeee5728d30430746f15414a17d850bccc8d54c57d
SHA512
f02df4ee6f3e1136b3c434624ad0c4ef8dd90ef4889b261bacd1989e98ef3cf3a7609c8d1ca1d7baeb6e1b4e69d23ae2c766a1a1299179582b70000ab1a74755
SSDEEP
1536:3NIKDp4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:+qp4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ