DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ca7678f54763806c0f6f23693128d904e0a4313bfa63342b2c3bfeb0f00d4c58.dll
Resource
win7-20220901-en
Target
ca7678f54763806c0f6f23693128d904e0a4313bfa63342b2c3bfeb0f00d4c58
Size
80KB
MD5
3c0e46d61bbc96c49658505c3a21ebc0
SHA1
8dfe08f87be24009fa62bef04a7c09e88c8316c8
SHA256
ca7678f54763806c0f6f23693128d904e0a4313bfa63342b2c3bfeb0f00d4c58
SHA512
e860675fd81196c47fb7cf27763f17ea35183af622329e40305adef72a8cb391466d802c9f2c5fb6773b4bf7f8d256678291a5f2ef0361c2ddb5b72ae354d33d
SSDEEP
1536:BBlgNeUsnLioT35eH9NYAnbbdbiUSo/4qBp:BTQsLtIjbdiUSw4qBp
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
FreeLibrary
lstrlenA
GetCommandLineW
Process32Next
Process32First
GetCurrentProcessId
CreateDirectoryA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
RemoveDirectoryA
ExitProcess
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
SetFileAttributesA
MoveFileA
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
LocalFree
CreateThread
WritePrivateProfileStringA
CloseHandle
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
Sleep
DeleteFileA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
??2@YAPAXI@Z
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
strcmp
memcpy
memcmp
_access
atoi
_wcslwr
wcsstr
strstr
sprintf
strncpy
strchr
memset
strncmp
strlen
strcpy
??3@YAXPAX@Z
fclose
fread
_strupr
ftell
fseek
fopen
strcat
strrchr
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ