C_GetFunctionList
FC_GetFunctionList
NSC_GetFunctionList
NSC_ModuleDBFunc
Static task
static1
Behavioral task
behavioral1
Sample
c79cf82dd34ec88cfc5aa4ea4079bd8800c42f5eb1c0faaaadb362a451456d50.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c79cf82dd34ec88cfc5aa4ea4079bd8800c42f5eb1c0faaaadb362a451456d50.dll
Resource
win10v2004-20221111-en
Target
c79cf82dd34ec88cfc5aa4ea4079bd8800c42f5eb1c0faaaadb362a451456d50
Size
216KB
MD5
f7f7ad2c0a28bdc3ba9d948d83a36021
SHA1
aae56921ca67f824a84bdd8630fff9c7c82cfb7c
SHA256
c79cf82dd34ec88cfc5aa4ea4079bd8800c42f5eb1c0faaaadb362a451456d50
SHA512
7e6030a2f49492c8b959bc785bcff5de2f21dc6a9293171b5247c6084fb524e1a874a8e087521b293c01f0629d12fcb263eac3eda32c90303445e88163b82c72
SSDEEP
3072:bOyZ070kM7voCAvvrIobUWgZD0Z+//KlwgDwmK0roi/B3CkqBXuUC3Cf4Xne+s5:b8hM7voHvM8UWa0oBgM65CzRCSf4XnG5
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
sqlite3_bind_text
sqlite3_bind_int
sqlite3_column_bytes
sqlite3_column_blob
sqlite3_step
sqlite3_column_int
sqlite3_prepare_v2
sqlite3_bind_blob
sqlite3_reset
sqlite3_finalize
sqlite3_open
sqlite3_busy_timeout
sqlite3_close
sqlite3_free
sqlite3_mprintf
sqlite3_exec
SECOID_DestroyAlgorithmID_Util
SECITEM_CopyItem_Util
PORT_SetError_Util
SECOID_FindOIDTag_Util
PORT_FreeArena_Util
SECITEM_AllocItem_Util
PORT_ArenaZAlloc_Util
PORT_NewArena_Util
PORT_Free_Util
PORT_Alloc_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
SECITEM_CompareItem_Util
PORT_Strdup_Util
SECOID_FindOIDByMechanism
SGN_DecodeDigestInfo
SGN_CreateDigestInfo_Util
DER_Encode_Util
SGN_DestroyDigestInfo_Util
PORT_GetError_Util
UTIL_SetForkState
SECOID_Shutdown
SECOID_Init
SECITEM_HashCompare
DER_SetUInteger
NSS_Get_SEC_OctetStringTemplate_Util
SEC_QuickDERDecodeItem_Util
PORT_ArenaGrow_Util
PORT_Realloc_Util
SECOID_GetAlgorithmTag_Util
SEC_ASN1DecodeItem_Util
DER_GetInteger_Util
SEC_ASN1EncodeInteger_Util
SEC_ASN1EncodeItem_Util
SECOID_SetAlgorithmID_Util
SECOID_CopyAlgorithmID_Util
NSS_Get_SEC_BitStringTemplate_Util
SECITEM_DupItem_Util
PORT_ZFree_Util
SECITEM_ZfreeItem_Util
PORT_ZAlloc_Util
SECITEM_FreeItem_Util
NSS_Get_SEC_AnyTemplate_Util
PORT_ArenaAlloc_Util
PL_strncasecmp
PL_strcasecmp
PL_HashTableLookupConst
PL_HashTableAdd
PL_NewHashTable
PL_CompareValues
PL_HashTableDestroy
PL_HashTableLookup
PL_HashTableRemove
PL_HashTableEnumerateEntries
PR_CallOnce
PR_SetError
PR_Free
PR_Delete
PR_Rename
PR_smprintf
PR_NewMonitor
PR_DestroyMonitor
PR_snprintf
PR_GetEnv
PR_LoadLibraryWithFlags
PR_GetDirectorySeparator
PR_GetLibraryFilePathname
PR_Unlock
PR_Lock
PR_UnloadLibrary
PR_FindFunctionSymbol
PR_AtomicDecrement
PR_DestroyLock
PR_smprintf_free
PR_Sleep
PR_AtomicIncrement
PR_NewLock
PR_SecondsToInterval
PR_Access
PR_IntervalNow
PR_MillisecondsToInterval
PR_ExitMonitor
PR_GetCurrentThread
PR_EnterMonitor
PR_Now
_close
_fdopen
_open
_strdup
_chmod
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
strncpy
strcpy
isspace
strstr
strchr
fprintf
fopen
fclose
fgets
strncmp
fwrite
fputs
strncat
malloc
free
strcmp
getenv
sprintf
strrchr
atoi
isdigit
islower
isupper
memset
memcmp
memcpy
strcat
strlen
QueryPerformanceCounter
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedExchange
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
C_GetFunctionList
FC_GetFunctionList
NSC_GetFunctionList
NSC_ModuleDBFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE