DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dfe3e3a256d857d9a378779a460414c354376d823ea67787d229c45a97f6031d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfe3e3a256d857d9a378779a460414c354376d823ea67787d229c45a97f6031d.dll
Resource
win10v2004-20220812-en
Target
dfe3e3a256d857d9a378779a460414c354376d823ea67787d229c45a97f6031d
Size
305KB
MD5
dae0e0ec0a4b129bdff5bfccddaa4d54
SHA1
5d63780ce96f473f729aa26fcf05426696f2c779
SHA256
dfe3e3a256d857d9a378779a460414c354376d823ea67787d229c45a97f6031d
SHA512
c98799514ff4328c8d449b4f2ca88f73bceddaf53048bf94c449b226547b5b91a8b71c65b76d89f2b2dee47f6fd70eccdb779d1a22015557c0ea6742e992989e
SSDEEP
3072:tf+2oh8HFSWOwIXEEVJt41m25Ok2AOU+XM7uwX1Jk2FRq5xbZFODJJSnSajKRKTg:flfOwARt41m/MCwpEfbT8snN+M
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
RtlUnwind
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
SetThreadLocale
GetThreadLocale
LockResource
FindResourceExA
LocalFree
LocalAlloc
SetLastError
CloseHandle
GetCurrentProcess
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCommandLineA
VirtualProtect
VirtualAlloc
GetModuleHandleW
GetSystemInfo
VirtualQuery
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LoadLibraryA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
OutputDebugStringA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
SetFilePointer
DeleteCriticalSection
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
lstrlenW
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
GetConsoleCP
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumValueW
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
UnregisterClassA
CharNextA
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
StringFromCLSID
CoUninitialize
CoInitializeEx
CoTaskMemRealloc
GetErrorInfo
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
SHDeleteKeyW
SHGetFileInfoA
SetupDiEnumDeviceInfo
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
SetupDiGetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
CM_Get_DevNode_Registry_Property_ExW
CM_Get_Device_ID_ExW
CM_Get_Parent_Ex
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ