ATerminatePlay
DeleteTempFile
FBuildTempPathW
HrEditPhonebookEntry
SetSystemParameter
Static task
static1
Behavioral task
behavioral1
Sample
b2e6daaf868b5476cbfe5c4d10c5d41ac992c50301cdde567607f617e58aaebe.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b2e6daaf868b5476cbfe5c4d10c5d41ac992c50301cdde567607f617e58aaebe.dll
Resource
win10v2004-20221111-en
Target
b2e6daaf868b5476cbfe5c4d10c5d41ac992c50301cdde567607f617e58aaebe
Size
168KB
MD5
1241c29676ea27bf47f014a9bcbf9503
SHA1
1dc0449a2b13c8f51a9be0dea42d5d427e6fa9b5
SHA256
b2e6daaf868b5476cbfe5c4d10c5d41ac992c50301cdde567607f617e58aaebe
SHA512
9446e803de682a74ee66eb1ad4cbcb538fd4add85e3fd781f927bfe2d44afec78b471126d319bf35a793e51237dbea85954417ab890eb02df9c2783cc1d6cc87
SSDEEP
3072:9wtbloo4nRSdK3ZWifcYP09XDiUI8+Ke5hcXHg3kHfSZ1HHfLxVyqc2:9alooUBsKcYkzi1D0fST
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wprintf
wcsstr
printf
memset
free
exit
_wcslwr
_wcsdup
_ismbblead
_initterm
_exit
_controlfp
_cexit
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
_XcptFilter
SHCreateDirectoryExW
SHGetSpecialFolderLocation
CommandLineToArgvW
IsWindow
MessageBoxW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
VirtualFree
GetModuleHandleA
GetFullPathNameW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
FindNextFileW
ExitProcess
VirtualProtect
lstrlenW
GetProcAddress
FindFirstFileW
ArcTo
PolyDraw
ATerminatePlay
DeleteTempFile
FBuildTempPathW
HrEditPhonebookEntry
SetSystemParameter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ