DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d828785800f045b16e7b860316f114ba2963cd7b6c797101d333d75140aec715.dll
Resource
win7-20220812-en
Target
d828785800f045b16e7b860316f114ba2963cd7b6c797101d333d75140aec715
Size
52KB
MD5
49ba88c0e67273ac219a767ef172c175
SHA1
89a2f6ec73f9bc2662d34747b0802876f953d04d
SHA256
d828785800f045b16e7b860316f114ba2963cd7b6c797101d333d75140aec715
SHA512
1b6c07bea80b5e89a01e4d3007b8ecba6ef25f75559f85b907bdce870f373cda55c4cb4c887a35029fe911b8e159c8808d9a8e9f2f9eeeed381cc70c47b9cdb4
SSDEEP
768:O2C5qBVPQrj/Sj/s3y208KDgU/qfH9DZPhJFl1AN4DAzZl6j0a7647H:OPSp/j/O08ygU01bZ1AN5ZQN7T7
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateDirectoryA
WideCharToMultiByte
lstrlenW
WritePrivateProfileStringA
GetCurrentProcessId
lstrlenA
GetProcAddress
LoadLibraryA
CreateThread
FreeLibrary
LocalFree
GetCommandLineW
Sleep
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
MultiByteToWideChar
MoveFileA
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
Process32First
CloseHandle
Process32Next
DeleteService
ControlService
CloseServiceHandle
RegQueryValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
OpenSCManagerA
OpenServiceA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
??2@YAPAXI@Z
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
strncmp
strncpy
strchr
atoi
memcpy
memcmp
strcmp
_access
wcsstr
_wcslwr
??3@YAXPAX@Z
strstr
strcpy
memset
strrchr
sprintf
strcat
_strlwr
strlen
fclose
fread
ftell
fseek
fopen
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ