DllCanUnloadNow
DllGetClassObject
HandlerEx
RegisterSelf
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b0f3e926e7b3fbf7a7904327ea16a2763de43c7f02e06bb360d8db7674970ab6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b0f3e926e7b3fbf7a7904327ea16a2763de43c7f02e06bb360d8db7674970ab6.dll
Resource
win10v2004-20220812-en
Target
b0f3e926e7b3fbf7a7904327ea16a2763de43c7f02e06bb360d8db7674970ab6
Size
59KB
MD5
bf6af63fffb088241b86393fb126f505
SHA1
1eeaab705f8232d22a88803736611731431675ad
SHA256
b0f3e926e7b3fbf7a7904327ea16a2763de43c7f02e06bb360d8db7674970ab6
SHA512
8776c8c739e956e8752cb72000eabd852e9fb012e9a624a04bbdcee55fa27a6dc1b96f969a3475883406ebda232ca60a305c9a3674c0047481712ad6d9ceb156
SSDEEP
1536:tkBXtGpTyDftGGjmNTGdA4jOeHwu8R5wHuDAjGNGcI4z:tk5t2itGGjIWdjOeQhRmODsGNGr4z
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
isleadbyte
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
??1type_info@@UAE@XZ
_onexit
_lock
__dllonexit
_unlock
atol
memmove
??0exception@@QAE@ABV0@@Z
strstr
memcmp
memset
printf
_purecall
??2@YAPAXI@Z
time
strspn
??3@YAXPAX@Z
srand
rand
atoi
strlen
malloc
free
_stricmp
memcpy
_iob
_errno
__CxxFrameHandler
_CxxThrowException
_except_handler3
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
??0Init@ios_base@std@@QAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0logic_error@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1strstreambuf@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?underflow@strstreambuf@std@@MAEHXZ
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JW4seekdir@ios_base@2@H@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1istrstream@std@@UAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1Init@ios_base@std@@QAE@XZ
connect
WSAGetLastError
__WSAFDIsSet
send
ntohs
recv
select
htons
bind
socket
listen
accept
gethostname
inet_ntoa
WSAStartup
inet_addr
shutdown
WSACleanup
closesocket
gethostbyname
getpeername
RpcStringFreeA
UuidToStringA
StrTrimA
InterlockedIncrement
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
OutputDebugStringA
InterlockedDecrement
FindClose
FindFirstFileA
GetTickCount
CreateThread
ResetEvent
CreateEventA
Sleep
SetEvent
WaitForSingleObject
DeleteFileA
CloseHandle
DeleteCriticalSection
GetModuleHandleA
GetModuleFileNameA
MoveFileA
EnterCriticalSection
GetLastError
LeaveCriticalSection
InitializeCriticalSection
WriteFile
MoveFileExA
CreateFileA
GetVersion
KillTimer
TranslateMessage
SetTimer
GetMessageA
DispatchMessageA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
SHGetFolderPathA
SHGetSpecialFolderPathA
CoCreateGuid
DllCanUnloadNow
DllGetClassObject
HandlerEx
RegisterSelf
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ