DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7da80a3f7c2d56b14565a513be35fb162abf167f545006b8e11815d99dde51b0.dll
Resource
win7-20220812-en
Target
7da80a3f7c2d56b14565a513be35fb162abf167f545006b8e11815d99dde51b0
Size
60KB
MD5
30c073a0920eccf93eee63714b240d09
SHA1
19c95528917f2c5821a52f43dceb06835572a168
SHA256
7da80a3f7c2d56b14565a513be35fb162abf167f545006b8e11815d99dde51b0
SHA512
72df49f66ed4bf916508fe5df5479f4655b070e5e08823602bca7d14158bc403a108622bf06b0049441badd3ecae2fd7ca5908acbf1221b044e8075a94a6e267
SSDEEP
768:r4tjmeKSbmCUpfxD5iIxlFUfAigyjWz3qiekthT8sNXeVzZcPTRAbfjKmiN7gtjv:EtjuSB0wScAxDjqitTBN0EufuNUjPn
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateDirectoryA
MoveFileA
CreateThread
Sleep
GetCommandLineW
WritePrivateProfileStringA
GetExitCodeProcess
GetProcAddress
ExitProcess
RemoveDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FreeLibrary
GetCurrentProcessId
DeleteFileA
Process32First
Process32Next
SetFileAttributesA
LocalFree
GetSystemDirectoryA
CreateProcessA
CloseHandle
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
WaitForSingleObject
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
??2@YAPAXI@Z
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
strncmp
strncpy
_access
strcmp
strstr
strchr
atoi
_wcslwr
memcmp
memcpy
??3@YAXPAX@Z
memset
strlen
sprintf
strcat
strcpy
fclose
fread
_strlwr
ftell
fseek
fopen
strrchr
wcsstr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ