DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9cb94985bde29c4b9f1bea1181b5925fda9dfb5dca6871bc31217557bf784621.dll
Resource
win7-20221111-en
Target
9cb94985bde29c4b9f1bea1181b5925fda9dfb5dca6871bc31217557bf784621
Size
68KB
MD5
b68c7efa03311c9fbfab72a2f03e0386
SHA1
826dd5b0188299abdc3350cf44427c7420950576
SHA256
9cb94985bde29c4b9f1bea1181b5925fda9dfb5dca6871bc31217557bf784621
SHA512
a81095098f41191c18e3c110beb13fe17e407ae2974cef01b42b6407f9d049564f89531c586a5660726e4b0b74c4fbc2c6beeb803ce188cd0a7fde0df29c4fb1
SSDEEP
768:4NwXZcj6RrljHJdgZzOr/4aVBTREKUZ0b4XU6KDBFX0q8jhAOIe9uJo:9wcdgc7qCtnEfjNIe9e
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameA
GetCurrentProcessId
GetCommandLineW
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
DeleteFileA
CloseHandle
Process32Next
Process32First
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetModuleHandleA
FreeLibrary
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
WritePrivateProfileStringA
LocalFree
SetFileAttributesA
CreateThread
MoveFileA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenW
WideCharToMultiByte
LoadLibraryA
GetProcAddress
Sleep
ExitProcess
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
sprintf
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
fopen
fseek
ftell
fread
fclose
strncmp
strncpy
??3@YAXPAX@Z
strlen
memcpy
_purecall
??2@YAPAXI@Z
memcmp
_access
strcat
strcpy
memset
_strupr
atoi
strchr
strcmp
strrchr
strstr
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ