p_Abort
p_Advise
p_FreeMarshalStream
p_MarshalPtrInProc
p_ModuleGetClassObject
p_ModuleInit
p_ModuleRegisterClassObjects
p_Unadvise
p_UnmarshalPtr
Static task
static1
Behavioral task
behavioral1
Sample
8de38761c70db30d30e63c19949788d97a24265918ab7a2b8294cd8e0220fef3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8de38761c70db30d30e63c19949788d97a24265918ab7a2b8294cd8e0220fef3.dll
Resource
win10v2004-20220812-en
Target
8de38761c70db30d30e63c19949788d97a24265918ab7a2b8294cd8e0220fef3
Size
52KB
MD5
99db799fe302d0d809336a77df1867cc
SHA1
eb2accf992c65bc69266bb291093f07e3fee46a4
SHA256
8de38761c70db30d30e63c19949788d97a24265918ab7a2b8294cd8e0220fef3
SHA512
987132698395b7e7bff2d4bfec399c1ae2a5ee5d04de76d3065daa1685a55d8c33cffd518e60da78917ee3cfd0245d6f3bad087e28f46ea5bcccfc2143d6700e
SSDEEP
768:EDBgdJGGU+6I80ERVBcNv9rYtbsI2tDyW8RXo94gKrW:wgdR6I89/QCtQInl1oSy
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
VirtualFree
CreateEventA
GetCurrentThreadId
GetSystemInfo
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
GetSystemMetrics
wsprintfA
GetForegroundWindow
p_Abort
p_Advise
p_FreeMarshalStream
p_MarshalPtrInProc
p_ModuleGetClassObject
p_ModuleInit
p_ModuleRegisterClassObjects
p_Unadvise
p_UnmarshalPtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ