DllCanUnloadNow
DllGetClassObject
DllRegisterServer
YCROGregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
63a98382db01a7ffc11e0ade4cb39470025608da9621c96c7127411281bd78b0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63a98382db01a7ffc11e0ade4cb39470025608da9621c96c7127411281bd78b0.dll
Resource
win10v2004-20220812-en
Target
63a98382db01a7ffc11e0ade4cb39470025608da9621c96c7127411281bd78b0
Size
128KB
MD5
718f3c9794f0e03753b8eab402ee4c80
SHA1
7dac8faae6eb978836fa8eb5c2357b48e41beb82
SHA256
63a98382db01a7ffc11e0ade4cb39470025608da9621c96c7127411281bd78b0
SHA512
27f9759fbbc03c301686a6e4827f55ab336f8562a7933f6d4fbebf46da0dd0e0f84068155f4d83d4fb8e6b0bdbf461fd5186076227a248fe4afa836ac0608bc1
SSDEEP
1536:vfRiSs2llD2NHia+c2SjhHbyT2crn7pKssd:VplD2NHia+wtan7Qssd
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleW
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
GetShortPathNameW
LoadLibraryW
lstrcpyW
lstrcatW
LocalAlloc
LocalFree
WideCharToMultiByte
lstrcpyA
CreateThread
SetUnhandledExceptionFilter
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
GetProcAddress
DisableThreadLibraryCalls
LoadLibraryA
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetCPInfo
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
CharNextW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
SysStringLen
VariantChangeType
VarUI4FromStr
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
VariantCopy
VariantClear
SysAllocStringLen
socket
inet_ntoa
connect
WSAStartup
htons
gethostbyname
inet_addr
closesocket
StrStrW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
YCROGregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ