DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
ab9a6cfb20f0136e5aaf645b812c176e63daaa5c734cac443955bd1a1fd48e84.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ab9a6cfb20f0136e5aaf645b812c176e63daaa5c734cac443955bd1a1fd48e84.dll
Resource
win10v2004-20221111-en
Target
ab9a6cfb20f0136e5aaf645b812c176e63daaa5c734cac443955bd1a1fd48e84
Size
57KB
MD5
e5aa9f900ac55c8fd53b6562356cf1f1
SHA1
763e874402436f6c757d5c2eab8c7a2797b76efc
SHA256
ab9a6cfb20f0136e5aaf645b812c176e63daaa5c734cac443955bd1a1fd48e84
SHA512
a0a347ba5359a541481efcc91a8bcae4f644d3c39ce3be6873db6c10cd57384be19b716fd697c2f8b294468611adfbc0eb9009b0d8e1fb1ebecc165f42c34758
SSDEEP
1536:HNIKDP4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:OqP4YU6ErtGNEKIpCT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ