COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
f8ae8c30fc6e4f12559d55be5d7868bc670364537f42f3065ab7a4495bd35145.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8ae8c30fc6e4f12559d55be5d7868bc670364537f42f3065ab7a4495bd35145.dll
Resource
win10v2004-20220812-en
Target
f8ae8c30fc6e4f12559d55be5d7868bc670364537f42f3065ab7a4495bd35145
Size
35KB
MD5
5bae67440abc9d1fbdc074b9a073147e
SHA1
e5797fe5698406693bfe0bcb1d5a1c70c29d0de0
SHA256
f8ae8c30fc6e4f12559d55be5d7868bc670364537f42f3065ab7a4495bd35145
SHA512
c1fb03756454651ece838a3e6dd264f9552537fea84af997fb4fcb614cff697d8e34734e7713cae57b277e39a0d1c5f836302a415b715c22b4d8c02548594c67
SSDEEP
768:QTN2XzTjuW5TiZRfnQb74E6V5hXDHmRtsHA:eEXnjEZRPe74EAlyRqg
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetSystemDirectoryA
CreateThread
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
MultiByteToWideChar
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetCommandLineA
Sleep
GetModuleHandleA
ExitProcess
IsBadReadPtr
GetTempPathA
WideCharToMultiByte
ReleaseDC
wsprintfA
GetWindowTextA
GetWindowRect
GetDC
GetDesktopWindow
GetClientRect
CallWindowProcA
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CreateDCA
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipLoadImageFromFile
GdipDisposeImage
GdiplusShutdown
GdipSaveImageToFile
GdiplusStartup
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
WSAStartup
send
recv
socket
inet_addr
htons
connect
gethostbyname
inet_ntoa
closesocket
WSACleanup
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
strrchr
_access
strcat
memset
strchr
strncpy
abs
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
_strlwr
_strrev
_getpid
malloc
wcscmp
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcmp
strtok
strstr
atoi
sprintf
strlen
strcpy
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ