COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
2e9dd6cf95a60570c69d8681da67f69f46e5febf6c398418e193c41095f45b5a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e9dd6cf95a60570c69d8681da67f69f46e5febf6c398418e193c41095f45b5a.dll
Resource
win10v2004-20221111-en
Target
2e9dd6cf95a60570c69d8681da67f69f46e5febf6c398418e193c41095f45b5a
Size
36KB
MD5
5a52bc9de039e03bae9b083cae6455ff
SHA1
9cd989d0d91376e41e060257337718796858ed7b
SHA256
2e9dd6cf95a60570c69d8681da67f69f46e5febf6c398418e193c41095f45b5a
SHA512
64cb33fea91431f15773306595b00d4aca249ef0a6e4d9b720c2626529b023834988c8d7cc3319db4085dfc1ed5b0b923842adf76a836cd2f190274bcfb4a6f1
SSDEEP
768:GH53hJbyNbNON0lQwuXgcR1pV7Oq7Kj95hNDRR0VAZlVq:sxByNbN+eqgcRF7V7YvdR0VAzI
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
CreateThread
SetFileAttributesA
GetCommandLineA
GetSystemDirectoryA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetModuleHandleA
Sleep
ExitProcess
IsBadReadPtr
GetParent
GetWindowThreadProcessId
ReleaseDC
FindWindowA
wsprintfA
GetWindowTextA
GetWindowRect
GetDC
GetDesktopWindow
GetClientRect
CallWindowProcA
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipLoadImageFromFile
GdipDisposeImage
GdiplusShutdown
GdipSaveImageToFile
GdiplusStartup
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
WSAStartup
send
recv
socket
inet_addr
htons
connect
gethostbyname
inet_ntoa
closesocket
WSACleanup
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
_access
strrchr
strchr
strncpy
abs
malloc
wcscmp
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strupr
_strlwr
_getpid
_stricmp
_strrev
??2@YAPAXI@Z
__CxxFrameHandler
strstr
memcpy
strncmp
strcat
atoi
sprintf
strlen
strcmp
strcpy
memset
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ