DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f9cae6985846eada2789e2e51812fe83ff558b972e66702f911f2ae348fa8516.dll
Resource
win7-20221111-en
Target
f9cae6985846eada2789e2e51812fe83ff558b972e66702f911f2ae348fa8516
Size
72KB
MD5
4812b8866162a6baca2880b4f97479f3
SHA1
487fa82ad70dd2f40ae0e2a1aa5d0408a6c2bb78
SHA256
f9cae6985846eada2789e2e51812fe83ff558b972e66702f911f2ae348fa8516
SHA512
4b629bfe4498d12439cc176a34f4a7677a9e55d20b1131f6337a76766edae1142bc81c8bdfd33c4aa35cea7f2dd0db9ba3ff552605a9f98fdb993d4678f574a9
SSDEEP
1536:mtuKKSpy3H6nl/KUmOO4Tnj+A/8pmqr+CoL68Qy:mACnlDo4jj+AkM68Q
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
CloseHandle
GetSystemDirectoryA
InitializeCriticalSection
FreeLibrary
GetCommandLineW
WritePrivateProfileStringA
Process32Next
Process32First
LocalFree
GetExitCodeProcess
WaitForSingleObject
MoveFileA
CreateDirectoryA
DisableThreadLibraryCalls
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
ExitProcess
CreateThread
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
LoadLibraryA
GetProcAddress
RemoveDirectoryA
CreateProcessA
Sleep
GetCurrentProcessId
DeleteFileA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
sprintf
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
atoi
memcmp
_purecall
memcpy
strcmp
_access
strcpy
??3@YAXPAX@Z
fclose
fread
memset
??2@YAPAXI@Z
ftell
fseek
fopen
strcat
strrchr
_strupr
strstr
strncpy
strchr
strncmp
strlen
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ