DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a99e774bbf5d4b2a208b1412723132e70be063ad7c22fcc4d15caa359a47b214.dll
Resource
win7-20220812-en
Target
a99e774bbf5d4b2a208b1412723132e70be063ad7c22fcc4d15caa359a47b214
Size
64KB
MD5
4a78b9b24f69e9b7f593487b9fd39d50
SHA1
fded61c9af30c4fae7cfa71da3b2a108018c6fcb
SHA256
a99e774bbf5d4b2a208b1412723132e70be063ad7c22fcc4d15caa359a47b214
SHA512
9cf229bef50339d6a9a8bc9e6d54ca25afde690a472eb12d978acbe010bdea273245b170ef7677da677378ff1600531b66b6e74702c0848c5e75deb5326d6995
SSDEEP
1536:DuuO818MQZ8M6mGyPy9/aElWZUKkp8k33/NXVOjprTR:jZQGbraElNKkhKjprV
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
Process32Next
Process32First
CreateProcessA
RemoveDirectoryA
CreateThread
Sleep
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
MoveFileA
GetCurrentProcessId
DisableThreadLibraryCalls
LoadLibraryA
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
WritePrivateProfileStringA
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
GetCommandLineW
GetProcAddress
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
LocalFree
SetFileAttributesA
InitializeCriticalSection
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strlen
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
_wcslwr
wcsstr
strcmp
_purecall
fopen
fseek
ftell
??2@YAPAXI@Z
sprintf
memcmp
memcpy
??3@YAXPAX@Z
strstr
strrchr
strcpy
strcat
memset
_access
_strupr
strncpy
strchr
strncmp
fclose
fread
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ