DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
de8268e5310c3ba6c7e65021ac27c34eeb7600980076c40b78d97872a4eaf51b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de8268e5310c3ba6c7e65021ac27c34eeb7600980076c40b78d97872a4eaf51b.dll
Resource
win10v2004-20221111-en
Target
de8268e5310c3ba6c7e65021ac27c34eeb7600980076c40b78d97872a4eaf51b
Size
96KB
MD5
86a2231d9edb93b4b72d7fa4dc3ecded
SHA1
30fd03d1de50cd69029e3394b5a46db527847c9c
SHA256
de8268e5310c3ba6c7e65021ac27c34eeb7600980076c40b78d97872a4eaf51b
SHA512
480090687aa75a9614a515b451e9f8a2f14a081771642f79ae33017f4ebab5126eb3fc651e8f7670631c5f872c02a28c853bf1d6727753e5a8f73b1ba4b29f65
SSDEEP
1536:OBAJgATuDyPm5VoLyq6yrLViOF9WeJzD6/LSYZzas+jAwUl2GeEqfWlmwCR9CJuQ:1sj5V7ArLUOFUdlcjgMcw9OWybuHbkmV
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlMoveMemory
ReadDirectoryChangesW
LocalFlags
ReadFileEx
LocalUnlock
GetStdHandle
HeapReAlloc
FileTimeToLocalFileTime
GetEnvironmentVariableA
CreateIoCompletionPort
GetLogicalDriveStringsW
OpenSemaphoreA
GetEnvironmentStringsW
GetFileAttributesA
SetDefaultCommConfigW
GetModuleFileNameW
GetProcessAffinityMask
GetSystemInfo
TerminateThread
VerLanguageNameW
GetFileType
WriteProfileStringA
GetTempPathW
CreateToolhelp32Snapshot
GetQueuedCompletionStatus
PulseEvent
MoveFileExW
SearchPathW
FlushConsoleInputBuffer
GetConsoleOutputCP
SetSystemTime
GetSystemTime
QueueUserWorkItem
WaitForMultipleObjectsEx
GetModuleHandleW
ReadConsoleW
GetCPInfo
ReadProcessMemory
SetConsoleWindowInfo
ConnectNamedPipe
SetFilePointer
FileTimeToDosDateTime
GetFileInformationByHandle
HeapSize
GlobalGetAtomNameW
CreateWaitableTimerW
GetConsoleMode
GetFullPathNameW
FreeLibraryAndExitThread
SetEvent
CopyFileW
lstrcmpA
LockFileEx
GetSystemDefaultLangID
GetVolumePathNamesForVolumeNameW
GetDriveTypeA
LockResource
InterlockedExchangeAdd
CreateNamedPipeA
lstrlenW
GetLocalTime
GetConsoleScreenBufferInfo
GetUserDefaultLCID
AllocConsole
lstrcpyW
WriteProfileStringW
GetAtomNameA
AssignProcessToJobObject
HeapCompact
GetLocaleInfoW
EnumUILanguagesW
GetSystemWindowsDirectoryA
UpdateResourceA
GetShortPathNameW
GetProfileIntW
UnregisterWait
CreateMailslotW
FreeEnvironmentStringsW
HeapValidate
CreateConsoleScreenBuffer
GetLocaleInfoA
CreateFileW
GetDateFormatW
GetComputerNameW
LockFile
GetDefaultCommConfigW
SuspendThread
ProcessIdToSessionId
ReadConsoleA
lstrcatA
GetBinaryTypeW
GetWindowsDirectoryA
GlobalMemoryStatus
GetThreadPriority
GlobalAddAtomA
GetStringTypeA
OpenFile
IsBadStringPtrW
WriteConsoleInputA
SetCurrentDirectoryW
GetProfileStringA
FreeResource
GetDateFormatA
HeapLock
IsBadWritePtr
CreateRemoteThread
CreateNamedPipeW
GetTimeFormatW
VirtualUnlock
HeapUnlock
GetNumberFormatA
SetComputerNameA
GetEnvironmentVariableW
GetSystemWow64DirectoryW
lstrcmpiA
SetConsoleCursorPosition
TransactNamedPipe
ExitThread
GetTempPathA
GetFileAttributesExA
GetUserDefaultLangID
GetDiskFreeSpaceExW
GetUserDefaultUILanguage
TerminateProcess
SetErrorMode
EnumResourceLanguagesW
WriteFileEx
SetProcessWorkingSetSize
WriteProcessMemory
RtlUnwind
GetThreadTimes
TerminateJobObject
ReadConsoleInputA
SetConsoleActiveScreenBuffer
FindVolumeClose
MultiByteToWideChar
CreateTimerQueue
GetCurrentDirectoryW
FreeConsole
QueueUserAPC
Sleep
GetLastError
GetModuleHandleA
LocalFree
MoveFileA
GlobalAlloc
CreateThread
GetProcAddress
HeapFree
DeleteFileA
InterlockedExchange
GetProcessHeap
CreateFileMappingA
CreateProcessA
VirtualQuery
CreateDirectoryA
GetCurrentProcessId
LeaveCriticalSection
CreateFileA
InterlockedDecrement
EnterCriticalSection
LoadLibraryA
InterlockedIncrement
InitializeCriticalSection
WriteFile
ReadFile
GetSystemTimeAsFileTime
ReleaseMutex
GetFullPathNameA
CloseHandle
CoGetInterfaceAndReleaseStream
CoCreateFreeThreadedMarshaler
GetRunningObjectTable
OleSaveToStream
GetHGlobalFromILockBytes
OleDuplicateData
CreateDataCache
StgOpenStorage
OleCreateStaticFromData
OleSave
OleUninitialize
OleRegGetUserType
CoRegisterMessageFilter
IIDFromString
StgIsStorageILockBytes
CoFreeUnusedLibraries
CreateFileMoniker
CoWaitForMultipleHandles
OleCreate
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
UrlCreateFromPathW
StrChrIW
PathAddBackslashW
PathCompactPathW
UrlEscapeW
StrCmpNW
StrRetToStrW
PathUnquoteSpacesW
PathRemoveFileSpecW
StrCpyW
StrChrW
StrToIntA
StrCmpNIW
PathStripToRootW
PathFindNextComponentW
PathParseIconLocationW
SHCreateShellPalette
PathFindExtensionW
UrlCombineW
PathSetDlgItemPathW
PathFindFileNameW
SHRegGetValueW
PathAppendW
wnsprintfW
PathMakePrettyW
PathSkipRootW
StrChrA
StrFormatByteSizeW
PathRenameExtensionW
SHDeleteKeyW
PathIsDirectoryW
AssocCreate
PathFindFileNameA
StrFormatKBSizeW
StrStrA
SHDeleteValueW
SHRegGetUSValueW
PathRemoveArgsW
UrlUnescapeW
PathRemoveBlanksW
RegOpenKeyExA
SetNamedSecurityInfoA
LookupAccountNameA
RegCloseKey
GetSecurityDescriptorSacl
RegQueryValueExA
ConvertSidToStringSidA
RegSetValueExA
RegQueryInfoKeyA
RegisterServiceCtrlHandlerExA
GetTokenInformation
RegLoadKeyA
RegSetValueW
OpenEventLogW
OpenServiceW
ImpersonateNamedPipeClient
RegReplaceKeyW
RegEnumKeyExW
RegRestoreKeyA
RegOpenKeyExW
RegQueryValueExW
IsTokenRestricted
CreateServiceW
ChangeServiceConfigW
MapGenericMask
OpenSCManagerA
RegEnumValueW
RegCreateKeyExW
GetEffectiveRightsFromAclW
RegCreateKeyW
ClearEventLogW
EnumServicesStatusA
RegConnectRegistryA
StartServiceCtrlDispatcherA
CreateServiceA
NotifyChangeEventLog
DeregisterEventSource
RevertToSelf
GetServiceKeyNameW
EnumServicesStatusExW
RegConnectRegistryW
DuplicateTokenEx
RegEnumValueA
RegSetValueExW
LockServiceDatabase
RegisterServiceCtrlHandlerA
RegCreateKeyExA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ