DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4edc498aa587b9ae7891d165ba5702b5f3f7a2e596c29bc1b52d44c72c1b02b3.dll
Resource
win7-20220901-en
Target
4edc498aa587b9ae7891d165ba5702b5f3f7a2e596c29bc1b52d44c72c1b02b3
Size
76KB
MD5
1042745f8787bcd3d98d6a3970bbfad2
SHA1
00d76b6d62954b75297024674bdeca7a1a7a37da
SHA256
4edc498aa587b9ae7891d165ba5702b5f3f7a2e596c29bc1b52d44c72c1b02b3
SHA512
e174ce28b0008d6df87d1f0386bcbe3bd59207624374f30b3b347f6f2dd5379ca99f48bd3b5674c051caa0bad6dc16a0f521ca0285cb9ff661656a734b2af2a9
SSDEEP
1536:enTZXPwgm3T3ESbDI5VWqV08lqZq9Bt87R:TLEDe8QyBt87R
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LocalFree
ExitProcess
CreateDirectoryA
MoveFileA
SetFileAttributesA
WritePrivateProfileStringA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
lstrlenA
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateThread
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Process32Next
Process32First
GetCurrentProcessId
MultiByteToWideChar
GetProcAddress
WaitForSingleObject
GetExitCodeProcess
GetSystemDirectoryA
GetModuleFileNameA
GetCommandLineW
LoadLibraryA
FreeLibrary
CloseHandle
lstrlenW
WideCharToMultiByte
DeleteFileA
RemoveDirectoryA
Sleep
CreateProcessA
InterlockedIncrement
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
memcmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcmp
_wcslwr
wcsstr
_purecall
strrchr
fopen
fseek
ftell
??2@YAPAXI@Z
??3@YAXPAX@Z
strcat
strcpy
memset
_access
sprintf
strlen
strstr
atoi
strchr
_strupr
strncpy
strncmp
memcpy
fclose
fread
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ