DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
a18436729bc038c6adbfc24e61b5a82ab26c2568d273ea36644c65cd22959358.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a18436729bc038c6adbfc24e61b5a82ab26c2568d273ea36644c65cd22959358.dll
Resource
win10v2004-20220812-en
Target
a18436729bc038c6adbfc24e61b5a82ab26c2568d273ea36644c65cd22959358
Size
57KB
MD5
ec5bd6b86788b8365bd85fb471b69926
SHA1
f763850694cda8d0deadc81e38e1ce35c15326f0
SHA256
a18436729bc038c6adbfc24e61b5a82ab26c2568d273ea36644c65cd22959358
SHA512
6cffc8714b4d7b3dd1fd5c4011057d2b87bbe12010238d09e2398b6e7c8dae136d36467e8ee6dafb66587992fadfb56a17c78a0118f09ad634002f298b32c5af
SSDEEP
1536:CNIKDP4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:DqP4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ