WHInit
WHUninit
Static task
static1
Behavioral task
behavioral1
Sample
a287d82c4f2eccff523af59cc4dadf04602c8c9ed08e1b5c166b3fff8bd46dde.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a287d82c4f2eccff523af59cc4dadf04602c8c9ed08e1b5c166b3fff8bd46dde.dll
Resource
win10v2004-20220812-en
Target
a287d82c4f2eccff523af59cc4dadf04602c8c9ed08e1b5c166b3fff8bd46dde
Size
160KB
MD5
48609d2fce76cbddac259a0a980b0376
SHA1
055dc873411fdebdb5f9445f4e5cd970318f1dbe
SHA256
a287d82c4f2eccff523af59cc4dadf04602c8c9ed08e1b5c166b3fff8bd46dde
SHA512
e8e87dffd0775739a81d433e6de663bc3dbb7a6871bccf9b8bca96a37341f14931094b81016c94e99a4b427eef4609e241481398741044a0fef77eabc8e1d013
SSDEEP
3072:HPdVLzQRkviaPfd+g4T35SPBALftH4IL:vdyRaPb4jMW1
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumProcesses
GetModuleBaseNameA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Netbios
MultiByteToWideChar
CreateProcessA
FreeEnvironmentStringsA
lstrcpyA
lstrlenA
GetEnvironmentStrings
lstrcmpA
GetLastError
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
ReadFile
CreateFileA
GetFileSize
OpenFile
GetPrivateProfileIntA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
SetEndOfFile
SetFilePointer
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
OpenMutexA
CreateMutexA
GetStringTypeA
ReleaseMutex
LocalFree
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetEnvironmentVariableA
TerminateProcess
WideCharToMultiByte
lstrlenW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
Sleep
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
LCMapStringA
LCMapStringW
WaitForSingleObject
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
ExitProcess
HeapCreate
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
HeapReAlloc
HeapDestroy
SendMessageTimeoutA
GetSystemMetrics
GetParent
SetPropA
GetPropA
CallWindowProcA
SetWindowLongA
RegisterWindowMessageA
DispatchMessageA
TranslateMessage
SetTimer
KillTimer
GetAncestor
GetClassNameA
wsprintfA
PostThreadMessageA
SetWindowPos
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorA
CoCreateInstance
CoInitialize
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
VarCmp
WHInit
WHUninit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ