DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
829e83618953319c143f6de6e308b737e9a4b4aeac6a7740f60fa20eedd97671.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
829e83618953319c143f6de6e308b737e9a4b4aeac6a7740f60fa20eedd97671.dll
Resource
win10v2004-20220901-en
Target
829e83618953319c143f6de6e308b737e9a4b4aeac6a7740f60fa20eedd97671
Size
57KB
MD5
4f2a57df0333c4f07a12e60dd582d69d
SHA1
a070ad1dee9c4bc77cf3f4b61f28a27abb278f0a
SHA256
829e83618953319c143f6de6e308b737e9a4b4aeac6a7740f60fa20eedd97671
SHA512
d799028eca9fa97903cc379cb34940874b6cc143753a0481a64874745304a55ba56572f78b15f8ba9c96fcd793a45bbac986e89706cea1dca3605a1a27e00299
SSDEEP
1536:oNIKDv4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:9qv4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ