BeginState
SetColumns
StreamSubStringMatch
UlStripWhitespaceW
Static task
static1
Behavioral task
behavioral1
Sample
b0e68a1dd9ed02a6be7552c9dce817c841b8578cda5b4c2dac5274dd8563ec21.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0e68a1dd9ed02a6be7552c9dce817c841b8578cda5b4c2dac5274dd8563ec21.dll
Resource
win10v2004-20220812-en
Target
b0e68a1dd9ed02a6be7552c9dce817c841b8578cda5b4c2dac5274dd8563ec21
Size
167KB
MD5
bc8bb3666f9d24a259bf32935eb8e25a
SHA1
b1613c24a7af1a1e83021f64cef26a4492814e7b
SHA256
b0e68a1dd9ed02a6be7552c9dce817c841b8578cda5b4c2dac5274dd8563ec21
SHA512
96b986cdb6fcffe7fa0f81ab068a644513b76b770ead8ab99f3a0a79f99353128f5c4532b2fd729cdbcc772d3f40672d3f9d583b61d1c5cca0f98e449720bbef
SSDEEP
3072:zfSz4HIc1S14/kJKGLctw6DwzOkIxU+aWg52EjjYMSaGDz+PDhCAZvdfC9QUg6UM:L0cQ6/kcN5zc5nnYMSa8z+PXZM9fFy
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DeregisterEventSource
InitializeSecurityDescriptor
LsaSetDomainInformationPolicy
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegisterEventSourceA
ReportEventW
SetSecurityDescriptorDacl
SetServiceStatus
CM_Free_Resource_Conflict_Handle
MessageBoxW
_lread
WriteFile
WideCharToMultiByte
CancelWaitableTimer
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
DeleteCriticalSection
DeleteFiber
DeleteTimerQueueTimer
DeviceIoControl
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FormatMessageW
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetFileAttributesW
GetFullPathNameW
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetVersionExA
GlobalHandle
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
LeaveCriticalSection
LoadModule
LocalFree
MoveFileExW
OutputDebugStringW
Process32NextW
QueryPerformanceCounter
ReadFile
SetCommMask
SetCommTimeouts
SetEvent
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
getservbyname
gethostbyname
htons
inet_ntoa
ntohl
ntohs
gethostbyaddr
WSASetLastError
htonl
SHAddToRecentDocs
SHGetFolderPathW
BeginState
SetColumns
StreamSubStringMatch
UlStripWhitespaceW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ