DllRegisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
aebff99cbadfa1d5ddcd0167d2fc836e387dfaab2e4db85828ca2278b92c99fd.dll
Resource
win7-20221111-en
Target
aebff99cbadfa1d5ddcd0167d2fc836e387dfaab2e4db85828ca2278b92c99fd
Size
93KB
MD5
2d0c542bb0003b496617af097c843226
SHA1
2143c533d9845d2aac619fa322d4566b5db6e7fe
SHA256
aebff99cbadfa1d5ddcd0167d2fc836e387dfaab2e4db85828ca2278b92c99fd
SHA512
9fdaedd46755b232e1dc2d28de53a91ae4169f7679e17cbd1fcdc8b15a3c21bd0527047f7ad4f271b4c2e8b0914c183bf51f4819ee938b5d624f04bbc98f50e8
SSDEEP
1536:HFLEwtQY623O9IMSa+1oe+FlfkhWaRV5QQVw9W6:GsvMSa+We+XfkhWanlVmW6
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LdrFindResource_U
memmove
LdrAccessResource
atoi
RtlUnwind
_vsnwprintf
InterlockedDecrement
VirtualAlloc
DisableThreadLibraryCalls
Sleep
GetModuleFileNameW
lstrlenW
GetLastError
GetConsoleCP
FlushFileBuffers
InterlockedIncrement
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetStringTypeW
LCMapStringEx
HeapReAlloc
LoadLibraryW
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
CloseHandle
MultiByteToWideChar
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
CreateFileW
GetStdHandle
WriteFile
GetProcessHeap
HeapSize
HeapFree
SetLastError
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
MessageBoxW
CryptAcquireContextA
RegSetKeyValueW
RegDeleteTreeW
SHChangeNotify
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
StringFromGUID2
CoTaskMemFree
StrStrIW
ord158
ord154
ord16
ord172
SHStrDupW
ord219
DllRegisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ