DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e4f92fa1f282e765f581085d3cb1462e26d951f41d11e356c5b69b864051dc80.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4f92fa1f282e765f581085d3cb1462e26d951f41d11e356c5b69b864051dc80.dll
Resource
win10v2004-20220812-en
Target
e4f92fa1f282e765f581085d3cb1462e26d951f41d11e356c5b69b864051dc80
Size
213KB
MD5
1b976410aa4fc461fda602be1ed69575
SHA1
f710489259bc2262c6bf5dcb0f904e9d72a38412
SHA256
e4f92fa1f282e765f581085d3cb1462e26d951f41d11e356c5b69b864051dc80
SHA512
bdbb4b9e2d4b72e052beb5fa184d20ab953e2efd83076ce29ea8ab8901b58177d999889a0048fc4d45e033768bca82f30a7d6ceba618e3adf4ac52de5aadd1e3
SSDEEP
3072:U3MDQuGKF811OQG/0jwEoyWLjEqPgiYZywmNyhlCuP5GqM1g4nu8RvDOdc2gfhkz:KRo0MvveCd1NtMN8ynB
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
EnterCriticalSection
InterlockedDecrement
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
InterlockedIncrement
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
SetEnvironmentVariableA
CompareStringW
CompareStringA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GlobalFindAtomW
GlobalAddAtomW
GetTempPathW
GetTempFileNameW
GetLastError
Sleep
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsWindow
GetClientRect
CharNextW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
SHLoadInProc
ShellExecuteW
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
VarUI4FromStr
SysAllocString
RegisterTypeLi
VMProtectBegin
VMProtectEnd
URLDownloadToFileW
PathRenameExtensionW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ