Init
Load
Unload
Static task
static1
Behavioral task
behavioral1
Sample
b1f54b9560064fc63af675ad7b856e50c86bc82d7bb1e3eaf0d1efe77e9f5a31.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b1f54b9560064fc63af675ad7b856e50c86bc82d7bb1e3eaf0d1efe77e9f5a31.dll
Resource
win10v2004-20220812-en
Target
b1f54b9560064fc63af675ad7b856e50c86bc82d7bb1e3eaf0d1efe77e9f5a31
Size
60KB
MD5
1dd453412738d994193ec4976ceea326
SHA1
7a6179fd77787b46cb67e584ad1f75665559d028
SHA256
b1f54b9560064fc63af675ad7b856e50c86bc82d7bb1e3eaf0d1efe77e9f5a31
SHA512
a40bd946b99a8a762b81c1403b99b971f3cc6eb778727c245878eac047618e73cdf68b31cb6c7c9fb5023e7e5ace1ff270c3f0e9be3766f4d5dc7b9e60b71c7f
SSDEEP
768:EWHOw0neh5JaYVrAqu1bjcyGBTaT8cdgt0cBThF98WgVDfEVBVY01o6/KQ6F+p:Meh5IIpu1bjc0S0MD9gVD8wQS+p
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WSAStartup
gethostbyname
shutdown
WSACleanup
gethostname
closesocket
connect
ntohs
htons
__WSAFDIsSet
select
recv
send
WSAGetLastError
WSASocketA
GetStdHandle
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
CloseHandle
WaitForSingleObject
CreateProcessA
CreateThread
Sleep
LoadLibraryA
GetVersionExA
GetModuleFileNameA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
Init
Load
Unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ