DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
79fac9cf19505eeb79a577d6ff0efe1617cf23169cf69ed1a37c16bddca1f0a8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79fac9cf19505eeb79a577d6ff0efe1617cf23169cf69ed1a37c16bddca1f0a8.dll
Resource
win10v2004-20220901-en
Target
79fac9cf19505eeb79a577d6ff0efe1617cf23169cf69ed1a37c16bddca1f0a8
Size
57KB
MD5
d89f4af921e2dba33e238e1f6b798b7a
SHA1
93cf08e280f640cb85f126a8b031943d2f07ce94
SHA256
79fac9cf19505eeb79a577d6ff0efe1617cf23169cf69ed1a37c16bddca1f0a8
SHA512
38703d6dfa6ac811c3600d4c737ec38f5ad64c6d3f3f59f49f966bb58cae2cec48c20cda8374319b1d2d66815f438e5a66111299366c3968d62fe3fabf737287
SSDEEP
1536:FNIKDP4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:wqP4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ