DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9877a31151850115642dcb56aaedb58a1f9d7d4ac290a2065f2660271729b6b8.dll
Resource
win7-20221111-en
Target
9877a31151850115642dcb56aaedb58a1f9d7d4ac290a2065f2660271729b6b8
Size
131KB
MD5
65c2029e168a077276bf4a5e626cc02b
SHA1
2e48f486f143b8787b21db90970328b54bdd6514
SHA256
9877a31151850115642dcb56aaedb58a1f9d7d4ac290a2065f2660271729b6b8
SHA512
9bed6ea44eaa2dcac5bc16dc1dcc1624db2a3f3cb359802086c5cb2343e119b35fa958f78b295e77dbd34d06b04f7ffa6ddeb124c0e690f3a9f2c250db8995dc
SSDEEP
3072:SMFQmN1QyFMmC7MxesW4uTCLIoSL7a3y6dd2qrsBXDtR:SFmNb6mR9o3mdd8N
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE