ARawDecodeInit
GetExePath
HrIStreamWToBSTR
HrVerifyCertEnhKeyUsage
ReplaceChars
Static task
static1
Behavioral task
behavioral1
Sample
554e9a0b7738ff179dc7fdc9dd992ead15bffd14c495004c392ee9b3ad5ed056.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
554e9a0b7738ff179dc7fdc9dd992ead15bffd14c495004c392ee9b3ad5ed056.dll
Resource
win10v2004-20221111-en
Target
554e9a0b7738ff179dc7fdc9dd992ead15bffd14c495004c392ee9b3ad5ed056
Size
174KB
MD5
f962a220d428ac99890e63b34f1d77b9
SHA1
1bc0b1f8cf37542b48fa66a1bebcc278af4bfde1
SHA256
554e9a0b7738ff179dc7fdc9dd992ead15bffd14c495004c392ee9b3ad5ed056
SHA512
97997dcf2465b22b7718776dd47dbc97bf3507a58914760f342e3bcaad34babbc5eb2a17a0b4af93f935bd1c68abd71627b030623296f29549f06c9468c58f14
SSDEEP
3072:aUX9L8HZ9vNjUc532XomQ+Tx0aGoHKX8/ml59/wqgITe4Xr8D84Hut:aM9mZ9vNjUu2XtTx0voK8/spwqLJgI4O
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wprintf
wcsstr
printf
memset
free
exit
_wcslwr
_wcsdup
_ismbblead
_initterm
_exit
_controlfp
_cexit
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
_XcptFilter
SHCreateDirectoryExW
SHGetSpecialFolderLocation
CommandLineToArgvW
IsWindow
MessageBoxW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
VirtualFree
GetModuleHandleA
GetFullPathNameW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
FindNextFileW
ExitProcess
VirtualProtect
lstrlenW
GetProcAddress
FindFirstFileW
ArcTo
PolyDraw
ARawDecodeInit
GetExePath
HrIStreamWToBSTR
HrVerifyCertEnhKeyUsage
ReplaceChars
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ