DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ae3a1ea21f633e2f37b0e331e915cd0c693caa30eddb29a23541e004709d12ea.dll
Resource
win7-20220812-en
Target
ae3a1ea21f633e2f37b0e331e915cd0c693caa30eddb29a23541e004709d12ea
Size
64KB
MD5
6e4d8664d2343be4f09e7c34be12d69b
SHA1
3b68600d3ce9716cb64eb7da5bf1cfefbf8334c9
SHA256
ae3a1ea21f633e2f37b0e331e915cd0c693caa30eddb29a23541e004709d12ea
SHA512
cdf1456519349a1a3d562ef80c93c7cbdda12c29a25ed700e3119f6ca6d38eed77d4d722aa0529be216d7e6efbde9c4aee8dd3e7f09020a9fa91a0fa26fd3805
SSDEEP
768:fV1jnu9xfUGtXwhZidv+hbjJUgfVBG63TZN7DZ2nMIzxSumZdP6DenykBFjJY3ZT:t1q9bmhEmh/jfVPrzmsXZB6cNBFlY3
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WritePrivateProfileStringA
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
LoadLibraryA
CreateThread
GetProcAddress
WideCharToMultiByte
lstrlenW
GetCurrentProcessId
Sleep
DisableThreadLibraryCalls
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenA
GetShortPathNameA
GetModuleHandleA
RemoveDirectoryA
Process32Next
Process32First
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
LocalFree
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
MultiByteToWideChar
SetFileAttributesA
MoveFileA
DeleteFileA
CreateDirectoryA
GetModuleFileNameA
ExitProcess
GetCommandLineW
InitializeCriticalSection
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
ftell
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
memcmp
_purecall
memcpy
_wcslwr
wcsstr
strcpy
strcmp
strstr
memset
strlen
sprintf
_access
strcat
??3@YAXPAX@Z
fclose
fread
??2@YAPAXI@Z
_strupr
fseek
fopen
strrchr
atoi
strchr
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ