DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
11bbef23777355568a165ff7d305fa02ef377df6f32e7b998ef84eb5f5b85005.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
11bbef23777355568a165ff7d305fa02ef377df6f32e7b998ef84eb5f5b85005.dll
Resource
win10v2004-20221111-en
Target
11bbef23777355568a165ff7d305fa02ef377df6f32e7b998ef84eb5f5b85005
Size
1.2MB
MD5
fd5dee5b17fb3d4af35c300f8a92d4eb
SHA1
e86a2fc53f1ddae5b1436d9d6896500bb6b87e98
SHA256
11bbef23777355568a165ff7d305fa02ef377df6f32e7b998ef84eb5f5b85005
SHA512
a389e0977a5963f4ceb6488cf14b284855a6d7f244b68c489a06e1a3cbf6bd646a6466bfcbc9b92f53ee2f1710af3abf6710888dcb9c2a0836e0300b39270d99
SSDEEP
24576:uP24qkVF9ePcG5ewz7UZm2FMA5Tt1KBG:xzyekG5ewz7Un5DW
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FreeLibrary
GetModuleFileNameA
LoadLibraryA
ReleaseMutex
WaitForSingleObject
GetCurrentThreadId
GetLocalTime
CompareStringA
GetModuleHandleA
GetWindowsDirectoryA
GetSystemDirectoryA
SetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
DisableThreadLibraryCalls
QueryPerformanceCounter
ExitProcess
GetVersionExA
CloseHandle
GetFileSize
ReadFile
GetLastError
lstrlenA
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
LocalFree
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
GetThreadLocale
GetLocaleInfoA
GetACP
LocalAlloc
MessageBoxA
SetCursor
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
StringFromCLSID
OleRun
CoTaskMemAlloc
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree
VarBstrCmp
VarR8FromDec
VarDateFromStr
SysFreeString
VariantInit
VariantClear
SysAllocString
SetErrorInfo
VariantChangeTypeEx
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayCreate
VariantCopy
VarBstrCat
SafeArrayGetDim
LoadRegTypeLi
LoadTypeLi
VariantChangeType
SysAllocStringLen
VarCmp
VariantTimeToSystemTime
DispCallFunc
VarBstrFromI4
CreateErrorInfo
GetErrorInfo
SysReAllocStringLen
VarI4FromStr
VarUI4FromStr
VarR8FromStr
VarDecFromStr
SystemTimeToVariantTime
ord32
ord58
ord10
ord11
ord18
ord61
ord64
ord49
ord15
ord25
ord23
ord31
ord22
ord30
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@Vconst_iterator@01@0@Z
?rend@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AVconst_iterator@12@XZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AVconst_iterator@12@XZ
?_Nomemory@std@@YAXXZ
?rbegin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
wcslen
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
_callnewh
swscanf
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
iswdigit
iswspace
swprintf
_wfopen
fputws
fflush
fclose
strlen
strcat
_splitpath
strcpy
_exit
_wsplitpath
wcsncpy
wcscat
wcstok
_wtoi
wcscmp
_wtol
_ltow
wcschr
_resetstkoflw
malloc
realloc
free
atol
??_V@YAXPAX@Z
__CxxFrameHandler
??3@YAXPAX@Z
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
memset
_except_handler3
memmove
_purecall
memcpy
_wcsnicmp
wcscpy
wcsstr
_wcsicmp
memcmp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ