DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5cae04e574f504202e8fb85995bff1a3395fedf4689fd3f8ac65e2d2cd8945fb.dll
Resource
win7-20220812-en
Target
5cae04e574f504202e8fb85995bff1a3395fedf4689fd3f8ac65e2d2cd8945fb
Size
76KB
MD5
5cf9d725e90fe33d745962d3081b7bdd
SHA1
351215c70ea750693968b9817522e7b6919aad3e
SHA256
5cae04e574f504202e8fb85995bff1a3395fedf4689fd3f8ac65e2d2cd8945fb
SHA512
d7190468dd90c9f9fd2d6efa753119e7bdc9757017b0cbb255fd0d3ce8b617f21a52dddb1c85790cb4d521368f99df593b5bd5c72af7ac368369dd63b38e6a8f
SSDEEP
1536:cyyHor78pOX2bdZI8H+okShCtztwrFBFdibQ6kCeY:zbeOgZySKmdi86NeY
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateProcessA
GetSystemDirectoryA
FindNextFileA
DeleteFileA
DisableThreadLibraryCalls
FindFirstFileA
GetCommandLineW
Sleep
RemoveDirectoryA
ExitProcess
MoveFileA
CreateThread
WritePrivateProfileStringA
GetExitCodeProcess
WaitForSingleObject
Process32First
Process32Next
CloseHandle
SetFileAttributesA
LocalFree
CreateDirectoryA
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetPrivateProfileStringA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
memset
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
atoi
strcmp
??3@YAXPAX@Z
memcmp
strstr
_access
strcat
sprintf
strcpy
memcpy
_purecall
??2@YAPAXI@Z
_strupr
strrchr
strncpy
strchr
strncmp
strlen
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ