COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
f9500ae951f02dca704e7aadeb0ce6014e131e79f358763edf6e485e4d19458a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9500ae951f02dca704e7aadeb0ce6014e131e79f358763edf6e485e4d19458a.dll
Resource
win10v2004-20221111-en
Target
f9500ae951f02dca704e7aadeb0ce6014e131e79f358763edf6e485e4d19458a
Size
40KB
MD5
f3ca839be1c7e028dd9d3d8f54468033
SHA1
336f5dd77adf247ded07022e94169d8796fdb178
SHA256
f9500ae951f02dca704e7aadeb0ce6014e131e79f358763edf6e485e4d19458a
SHA512
6acf3d7eee44848ca1d3c18cc1bac9ad203082d8bb82cda316d391063ed6e221f077cdfc9fe0dfa796383280ccc8cbf8e22f518444eb43a14d21bb7170dcef3b
SSDEEP
768:/x8RDiAPBZEQvJf7eAO7wTEpSoX+hP6fWBoREfT4T/ZQ:/xUDJvJfKn7wTuluhKaoRiT4Ta
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateThread
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
DeleteFileA
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
SetFileAttributesA
GetCommandLineA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
Sleep
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA
GetSystemDirectoryA
GetWindowsDirectoryA
WritePrivateProfileStringA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
GetClassNameA
GetClientRect
CallWindowProcA
GetDC
GetWindowRect
ReleaseDC
GetWindowTextA
GetParent
GetWindowThreadProcessId
wsprintfA
EnumWindows
GetDesktopWindow
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
SHFileOperationA
GdiplusShutdown
GdipLoadImageFromFile
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
connect
htons
inet_addr
gethostbyname
inet_ntoa
WSAStartup
socket
WSACleanup
send
recv
closesocket
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
strrchr
strchr
_access
strncpy
strstr
abs
malloc
wcscmp
memcpy
__CxxFrameHandler
sscanf
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strlwr
_getpid
_stricmp
_strrev
strlen
??2@YAPAXI@Z
atoi
memset
sprintf
strcat
strcpy
strcmp
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ