DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ab61a14557be1e9e9f48868e5cc207ed09131125a10d073d7524605a60ced956.dll
Resource
win7-20220812-en
Target
ab61a14557be1e9e9f48868e5cc207ed09131125a10d073d7524605a60ced956
Size
60KB
MD5
d3a37fa8448964eb2dcb17c7365f1600
SHA1
44d3c59c812cb01cf81b95b452113e494391ab13
SHA256
ab61a14557be1e9e9f48868e5cc207ed09131125a10d073d7524605a60ced956
SHA512
412c101913eb8679695df0ffffae152c85a39ea753e13066d0b821a91941aa8580572aba30be92ea596122785a3a9450852294cbf8061ade58574a6cad98dbb5
SSDEEP
768:khuwdPcwQ+rd0VWwB7ZYFi9WgLlD5bvz9V1g2P/+1a/gCx9bZmKZxeR/gc84:G7kSE+5MlD5bvz9f9HuatBUAxedgcR
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
lstrlenA
GetShortPathNameA
GetModuleHandleA
Sleep
LoadLibraryA
Process32Next
Process32First
FreeLibrary
CreateThread
WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
ExitProcess
WritePrivateProfileStringA
GetProcAddress
MultiByteToWideChar
SetFileAttributesA
MoveFileA
GetSystemDirectoryA
GetModuleFileNameA
WaitForSingleObject
GetExitCodeProcess
LocalFree
CreateDirectoryA
GetCommandLineW
DeleteFileA
RemoveDirectoryA
CloseHandle
CreateProcessA
GetCurrentProcessId
SetNamedSecurityInfoA
SetEntriesInAclA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strchr
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strrchr
strcmp
_wcslwr
wcsstr
??3@YAXPAX@Z
strlen
memset
strcat
strcpy
sprintf
_access
strstr
??2@YAPAXI@Z
atoi
_strlwr
memcpy
_purecall
memcmp
strncpy
strncmp
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ