DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f60a100670e08bdf6b264c48d865c7b21bbe1ea5d0f5315567f30086b1fb7daa.dll
Resource
win7-20220812-en
Target
f60a100670e08bdf6b264c48d865c7b21bbe1ea5d0f5315567f30086b1fb7daa
Size
64KB
MD5
7415ac42302700f464e3885c2d2047b1
SHA1
3621b9214818566032b0c959ff1e132a5b367a56
SHA256
f60a100670e08bdf6b264c48d865c7b21bbe1ea5d0f5315567f30086b1fb7daa
SHA512
69d63e342923a6f7f4b6f5dcdc7847da2a40740e47cddebec61402f3e9261776d4b9c5ee623004e88842b7e9695572da0a60960ba257b394b408f53633ec32a1
SSDEEP
768:Anuii4m5NNUd+ZJsimrZIHqFdUilDCi7U66T7mTt7+arNlVgZVNx4SP0xIbibyQ9:l4med+LkcADD6p7lariZVNamDbfQqF2
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
Process32Next
Process32First
Sleep
GetCommandLineW
WideCharToMultiByte
CreateProcessA
GetSystemDirectoryA
RemoveDirectoryA
GetProcAddress
MultiByteToWideChar
CreateDirectoryA
LocalFree
WritePrivateProfileStringA
GetExitCodeProcess
WaitForSingleObject
MoveFileA
ExitProcess
GetCurrentProcessId
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
LoadLibraryA
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
CreateThread
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
memcpy
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
atoi
_access
strncmp
strchr
strncpy
fopen
fseek
ftell
??3@YAXPAX@Z
strstr
memset
strrchr
sprintf
strcat
strlen
strcpy
wcsstr
_wcslwr
_stricmp
_purecall
??2@YAPAXI@Z
memcmp
fclose
fread
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ