COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
a6f6ed8cb2615996a535f7dcf8312aa835e8f312b9d7fa55fb2586dc6a50b5bb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6f6ed8cb2615996a535f7dcf8312aa835e8f312b9d7fa55fb2586dc6a50b5bb.dll
Resource
win10v2004-20221111-en
Target
a6f6ed8cb2615996a535f7dcf8312aa835e8f312b9d7fa55fb2586dc6a50b5bb
Size
34KB
MD5
72deb49f8c2654439a078398276136f4
SHA1
5e9d3ab0bc0df3177f1c700bdb5d754e45202eb6
SHA256
a6f6ed8cb2615996a535f7dcf8312aa835e8f312b9d7fa55fb2586dc6a50b5bb
SHA512
708094906bf105233a551ad6c1242d2abef7abf2b45770344a6a43fe6b717b8c1a5adc3ab034d7159706b0cb05b4bef18157f730df0c5cd5aa6632a9f6291a01
SSDEEP
768:5lOTjhcY4591BlnONd7hFyDhChw59FR6Cjf:5lOTL45jy7hF4M6XFR6Cj
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
CreateToolhelp32Snapshot
ReadFile
TerminateProcess
OpenProcess
SetFileAttributesA
GetCommandLineA
WaitForSingleObject
GetSystemDirectoryA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetCurrentDirectoryA
GetPrivateProfileStringA
ExitProcess
CreateThread
IsBadReadPtr
Sleep
GetParent
GetWindowThreadProcessId
ReleaseDC
wsprintfA
GetWindowTextA
GetWindowRect
GetDC
GetDesktopWindow
SelectObject
CreateCompatibleBitmap
DeleteObject
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
CreateCompatibleDC
BitBlt
CryptHashData
CryptGetHashParam
CryptCreateHash
CryptAcquireContextA
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipSaveImageToFile
GdiplusShutdown
GdipLoadImageFromFile
GdipDisposeImage
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
_access
strrchr
strchr
atoi
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
malloc
wcscmp
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcat
strncmp
strstr
memset
sprintf
strncpy
strcmp
strcpy
strlen
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ