DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
270ad4207e9cb270545d07e56665fbdd17a804462321102ed5667d6f608fe2ed.dll
Resource
win7-20220901-en
Target
270ad4207e9cb270545d07e56665fbdd17a804462321102ed5667d6f608fe2ed
Size
76KB
MD5
277792809515dd0c5e0468fc43844470
SHA1
f4f4b4f893b3cb3f11633b657afd2f33200944c5
SHA256
270ad4207e9cb270545d07e56665fbdd17a804462321102ed5667d6f608fe2ed
SHA512
c7b3ebea3e2c4bbccdcdd942d6c6bc37e5011b84dcf04765fea86f1fd62075c7e5fa5bc8bfc1d57da5781010a8909a34a257ebf5790f9a60094a72f92cb19129
SSDEEP
768:fMVnqVASiR7pK4IhvFtrZZGmSqWX4r+D6EOK0WcDGkCn7ZvQ5r4p2kKoFyB1yCSY:fWPdpKDhHWnXXnOKayZ7Z24Ko4y3Y
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
MoveFileA
InitializeCriticalSection
LoadLibraryA
FreeLibrary
ExitProcess
CreateThread
GetCurrentProcessId
Process32Next
Process32First
CreateDirectoryA
WritePrivateProfileStringA
GetCommandLineW
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
RemoveDirectoryA
WaitForSingleObject
GetExitCodeProcess
lstrlenW
WideCharToMultiByte
LocalFree
Sleep
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
CreateProcessA
GetProcAddress
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegQueryInfoKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
memcmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
strcmp
strchr
memset
sprintf
??3@YAXPAX@Z
strlen
strcat
strcpy
_access
memcpy
_purecall
??2@YAPAXI@Z
_strupr
strstr
strrchr
wcsstr
_wcslwr
atoi
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ