DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
899f05ebe71f7c6955bc46066c260af84428ec9cf2084389df908b02ec92646f.dll
Resource
win7-20220812-en
Target
899f05ebe71f7c6955bc46066c260af84428ec9cf2084389df908b02ec92646f
Size
80KB
MD5
fdd11eaffc6731957c1a89433b4f90d0
SHA1
c4ef7110905f4717c6d9d1c926eaf6b56551d783
SHA256
899f05ebe71f7c6955bc46066c260af84428ec9cf2084389df908b02ec92646f
SHA512
9e78bb0017a00737bec5e4fed7324af18f43d456feedb4ea07cb8a9da2a02930eda092f87b8c2f1bb7500cd42d4a12ff7db3ca9b577b16eb5f387552c1643e45
SSDEEP
1536:JVz7DGpMn75eAl/+Z6GY2mcWiBFX0aAk:zXKABgvYhiz0Xk
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
CloseHandle
GetSystemDirectoryA
LeaveCriticalSection
WideCharToMultiByte
Process32Next
Process32First
WritePrivateProfileStringA
CreateThread
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
Sleep
MoveFileA
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LocalFree
LoadLibraryA
GetProcAddress
RemoveDirectoryA
CreateProcessA
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
CreateDirectoryA
ExitProcess
GetModuleFileNameA
GetCommandLineW
FreeLibrary
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
fseek
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strchr
atoi
_wcslwr
wcsstr
memcmp
_purecall
memcpy
memset
strlen
sprintf
??3@YAXPAX@Z
_access
strcat
fclose
fread
??2@YAPAXI@Z
ftell
_strlwr
fopen
strrchr
strstr
strcpy
strcmp
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ