EEGetModuleInterop
EEMain
Static task
static1
Behavioral task
behavioral1
Sample
b04e3e67e163eb8baecc367bffd4587c62fbf6e63102dee694636924a6efe58d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b04e3e67e163eb8baecc367bffd4587c62fbf6e63102dee694636924a6efe58d.dll
Resource
win10v2004-20221111-en
Target
b04e3e67e163eb8baecc367bffd4587c62fbf6e63102dee694636924a6efe58d
Size
180KB
MD5
8dc957b6867114d1d4572c471c72ed10
SHA1
09d809c11d536208ce06bb063487a3ca1c5972ab
SHA256
b04e3e67e163eb8baecc367bffd4587c62fbf6e63102dee694636924a6efe58d
SHA512
18544541f08cee3c33ff22eca4883d279b17729a94f47d797b78b8ebb50f48352217dd7827a7f97954659269bd8e15b36f4a80c9c1d52ebdfbfe25fea432b3e0
SSDEEP
3072:lZzGT8+zht9itL9pmgqZF/Yshgi8IeD/ZoM1U+aepqcf8UdddIHVhv:lZzGA+zht9DgohNgJdpPdd+Vhv
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
SetEvent
ResetEvent
InterlockedCompareExchange
GetCurrentThreadId
CompareStringA
InterlockedExchange
GetModuleHandleA
GetCurrentProcessId
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
ExitProcess
DisableThreadLibraryCalls
GetModuleFileNameA
FreeLibrary
KillTimer
SetTimer
MsgWaitForMultipleObjects
PostQuitMessage
TranslateMessage
CoCreateInstance
CoUninitialize
CoRegisterMessageFilter
CoInitializeEx
CreateBindCtx
SysAllocString
VariantInit
SafeArrayLock
SafeArrayCreate
SafeArrayUnlock
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayRedim
SafeArrayCopy
VariantCopy
VariantClear
VariantChangeTypeEx
?Assign@TBstr@XPRT@@QAEAAV12@PBG@Z
?Compare@TBstr@XPRT@@QBEHPBG@Z
??1TPtrFromPtrMap@XPRT@@QAE@XZ
?Lookup@TPtrFromPtrMap@XPRT@@QBE_NPAXAAPAX@Z
?SetAt@TPtrFromPtrMap@XPRT@@QAEPAU__POSITION@2@PAX0@Z
??0TPtrFromPtrMap@XPRT@@QAE@H@Z
?Format@TBstr@XPRT@@QAAXPBGZZ
?Empty@TBstr@XPRT@@QAEXXZ
?Tokenize@TBstr@XPRT@@QBE?AV12@PBGAAH@Z
_XprtMemFree@4
?Append@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Append@TBstr@XPRT@@QAEAAV12@PBG@Z
?Normalize@TBstr@XPRT@@QAEAAV12@XZ
_XprtGenerateRandom@8
??0TBstr@XPRT@@QAE@PBDPBG@Z
kSystemEncoding
_XprtMemAlloc@4
?Detach@TBstr@XPRT@@QAEPAGXZ
_XprtAtomicIncrement@4
?GetEncodedString@TBstr@XPRT@@QBEPBDPBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
xprt_strcmp
xprt_memmove
xprt_memset
_XprtAtomicDecrement@4
?Mid@TBstr@XPRT@@QBE?AV12@H@Z
?Find@TBstr@XPRT@@QBEHGH@Z
?GetAt@TBstr@XPRT@@QBEGH@Z
??ATPtrFromPtrMap@XPRT@@QAEAAPAXPAX@Z
?RemoveKey@TPtrFromPtrMap@XPRT@@QAE_NPAX@Z
?Lock@TSpinLock@XPRT@@QAEXXZ
?Unlock@TSpinLock@XPRT@@QAEXXZ
??0TBstr@XPRT@@QAE@PBG@Z
?GetNextAssoc@TPtrFromPtrMap@XPRT@@QBEXAAPAU__POSITION@2@AAPAX1@Z
?GetStartPosition@TPtrFromPtrMap@XPRT@@QBEPAU__POSITION@2@XZ
xprt_iswdigit
?Add@TPtrArray@XPRT@@QAEHPAX@Z
?SetCount@TPtrArray@XPRT@@QAE_NHH@Z
?GetDigestSize@TMdXDigest@XPRT@@UBEHXZ
?Finish@TMdXDigest@XPRT@@UAEHPAEH@Z
??0TMessageDigest@XPRT@@QAE@XZ
?Transform@TMd5Digest@XPRT@@EAEXQAIQBE@Z
?Append@TBstr@XPRT@@QAEAAV12@G@Z
?Update@TMessageDigest@XPRT@@QAEXPBEH@Z
xprt_memcpy
xprt_strlen
_XprtInitialize@8
_XprtUninitialize@0
??0TPtrArray@XPRT@@QAE@XZ
??1TPtrArray@XPRT@@QAE@XZ
?SetAtGrow@TPtrArray@XPRT@@QAEXHPAX@Z
_XprtCreateThread@8
_XprtGetMilliseconds@0
_XprtDestroyThread@8
?FreeDataChain@SPlex@XPRT@@QAEXXZ
?Create@SPlex@XPRT@@SGPAU12@AAPAU12@II@Z
?RemoveAll@TPtrFromPtrMap@XPRT@@QAEXXZ
?Attach@TBstr@XPRT@@QAEXPAG@Z
?Assign@TBstr@XPRT@@QAEAAV12@ABV12@@Z
??0TBstr@XPRT@@QAE@XZ
??1TBstr@XPRT@@QAE@XZ
?IsEmpty@TBstr@XPRT@@QBE_NXZ
?GetString@TBstr@XPRT@@QBEPBGXZ
?TrimLeft@TBstr@XPRT@@QAEAAV12@XZ
?TrimRight@TBstr@XPRT@@QAEAAV12@XZ
??0TBstr@XPRT@@QAE@ABV01@@Z
?MakeLower@TBstr@XPRT@@QAEAAV12@XZ
?Find@TBstr@XPRT@@QBEHPBGH@Z
?GetLength@TBstr@XPRT@@QBEHXZ
?SetOptimalLoad@TPtrFromPtrMap@XPRT@@QAEXMMM_N@Z
?Mid@TBstr@XPRT@@QBE?AV12@HH@Z
xprt_strlcpy
?ToInt@TBstr@XPRT@@QBEHH@Z
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
_snwprintf
_adjust_fdiv
_initterm
free
_onexit
__dllonexit
_except_handler3
_purecall
strcmp
qsort
setlocale
EEGetModuleInterop
EEMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE