Alloc
ChConvertFromHex
FIsHTMLFileW
HrEditPhonebookEntry
HrYtreamSeekSet
MShutDown
RicheditStreamIn
Static task
static1
Behavioral task
behavioral1
Sample
6688d6b6afa25fea41b9be422d37cc78b195b63ff2e129bacfcd93f68f57b6da.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6688d6b6afa25fea41b9be422d37cc78b195b63ff2e129bacfcd93f68f57b6da.dll
Resource
win10v2004-20220901-en
Target
6688d6b6afa25fea41b9be422d37cc78b195b63ff2e129bacfcd93f68f57b6da
Size
178KB
MD5
eeeecfad295f94f53bfc6ad55d15ac93
SHA1
711a2195f9370d0442fe8ebfebf07f744278fef9
SHA256
6688d6b6afa25fea41b9be422d37cc78b195b63ff2e129bacfcd93f68f57b6da
SHA512
367862a568d72daeb5387faf52e7256a1f6ccaeeb2c22da7faa775b45da14b3cf02439910f50cab71135f1ba3bdef2f273cf004b7a29ced56b7a8618530674d8
SSDEEP
3072:dOv6Ks/7E/FKMa3r9ff+gyw9HMJDnlrtkIV1G8GiPVYsmy56ah1kxJD+DDOPu:4v727EtKhB3+tssxlyk1GHiPVYs4ah1z
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SHGetSpecialFolderLocation
SHCreateDirectoryExW
CommandLineToArgvW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ArcTo
PolyDraw
VirtualProtect
lstrlenW
VirtualFree
VirtualAlloc
ExitProcess
FindFirstFileW
FindNextFileW
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetModuleHandleA
GetProcAddress
InterlockedExchange
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
MessageBoxW
IsWindow
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_controlfp
_exit
_initterm
_ismbblead
_wcsdup
_wcslwr
exit
free
memset
printf
wcsstr
wprintf
Alloc
ChConvertFromHex
FIsHTMLFileW
HrEditPhonebookEntry
HrYtreamSeekSet
MShutDown
RicheditStreamIn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ