DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e02fb331f1052215cc166feca43f9d1e12e941ab420b533d2f5c9299873f7f59.dll
Resource
win7-20221111-en
Target
e02fb331f1052215cc166feca43f9d1e12e941ab420b533d2f5c9299873f7f59
Size
64KB
MD5
6a6db1ad288933b3357608e9f5bfb790
SHA1
aacf8b4d8a6450dd2d683fa18465edacfd13ebad
SHA256
e02fb331f1052215cc166feca43f9d1e12e941ab420b533d2f5c9299873f7f59
SHA512
42f452ef5c28b3bcdd28c66034484a0ea374f85f0ba373854e7328cc719922e3e9f7652a9d966f4c9353858ddb06108c22eec233e09f569c9c0a6245f9864ad0
SSDEEP
1536:b3ZJ6FbnWQOytJW1nngplLCzvzicTF9lkDLRb:b3b6FXJJ1LC6wrk3R
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WideCharToMultiByte
LocalFree
SetFileAttributesA
FreeLibrary
MoveFileA
Sleep
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
lstrlenW
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCommandLineW
ExitProcess
CreateThread
WritePrivateProfileStringA
RemoveDirectoryA
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
Process32First
Process32Next
CloseHandle
lstrlenA
MultiByteToWideChar
GetCurrentProcessId
LoadLibraryA
GetProcAddress
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
EnterCriticalSection
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strcat
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
_access
_wcslwr
wcsstr
strcmp
fopen
fseek
ftell
fread
strstr
strrchr
sprintf
??3@YAXPAX@Z
strcpy
memset
memcmp
memcpy
??2@YAPAXI@Z
strlen
_strupr
strncpy
strchr
strncmp
_purecall
fclose
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ