DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
459110079e9c4c3289a20b89698b22a6df85158ad9cc9e0e67a7a9c9cc58952c.dll
Resource
win7-20221111-en
Target
459110079e9c4c3289a20b89698b22a6df85158ad9cc9e0e67a7a9c9cc58952c
Size
80KB
MD5
b45054d63e196510d1684e741a816400
SHA1
946cd81d0857a76c00e6d551895cbee564b1aeba
SHA256
459110079e9c4c3289a20b89698b22a6df85158ad9cc9e0e67a7a9c9cc58952c
SHA512
b41fd26e984a91c632fd1f7c19a398f0bc749652471f14fe021be5f50184803846e893c6d004ebb4fd48035b8a324889b630ade833d6bff4e69d598985d3f2ea
SSDEEP
1536:ytnr+iJ6c0SelgTbm7MxquT8TXYKu+Xsn1Cjd:ytr+8tIgXR8TXjXsn1Cj
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
CloseHandle
Process32Next
Process32First
GetCommandLineW
ExitProcess
GetExitCodeProcess
WaitForSingleObject
CreateThread
GetSystemDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
RemoveDirectoryA
WritePrivateProfileStringA
GetCurrentProcessId
WideCharToMultiByte
lstrlenA
lstrlenW
FreeLibrary
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
GetModuleFileNameA
Sleep
LoadLibraryA
GetProcAddress
LocalFree
CreateProcessA
RegQueryValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strcpy
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
_purecall
_access
memcpy
memcmp
strcat
fopen
fseek
??3@YAXPAX@Z
sprintf
strstr
??2@YAPAXI@Z
atoi
strchr
strncpy
memset
strncmp
strlen
_stricmp
strcmp
strrchr
fclose
fread
ftell
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ