COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
f04a63c30da1e905d5c2adb074e11b5829be6b8930df43c278c5f887023fd3ee.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f04a63c30da1e905d5c2adb074e11b5829be6b8930df43c278c5f887023fd3ee.dll
Resource
win10v2004-20221111-en
Target
f04a63c30da1e905d5c2adb074e11b5829be6b8930df43c278c5f887023fd3ee
Size
40KB
MD5
6e3c6257935eda3004a145ec7ded6ba0
SHA1
5e6f9504a495de2c38a68b4e4eeb09f10ce9f771
SHA256
f04a63c30da1e905d5c2adb074e11b5829be6b8930df43c278c5f887023fd3ee
SHA512
83ff517a4bc4a138aa460a482e2b1d27a78c00a9b13778b07f54ca1fa1f9ac6cd56bbf8920e39dc06a140e53a037e553f0b2e40ed5189211c94fbdca13abe393
SSDEEP
768:zx8RDiAPBZEQvJf7eAO7wTEpSoX+hP6fWBoREfT4T/ZQ:zxUDJvJfKn7wTuluhKaoRiT4Ta
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateThread
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
DeleteFileA
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
SetFileAttributesA
GetCommandLineA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
Sleep
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA
GetSystemDirectoryA
GetWindowsDirectoryA
WritePrivateProfileStringA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
GetClassNameA
GetClientRect
CallWindowProcA
GetDC
GetWindowRect
ReleaseDC
GetWindowTextA
GetParent
GetWindowThreadProcessId
wsprintfA
EnumWindows
GetDesktopWindow
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
SHFileOperationA
GdiplusShutdown
GdipLoadImageFromFile
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
connect
htons
inet_addr
gethostbyname
inet_ntoa
WSAStartup
socket
WSACleanup
send
recv
closesocket
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
strrchr
strchr
_access
strncpy
strstr
abs
malloc
wcscmp
memcpy
__CxxFrameHandler
sscanf
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strlwr
_getpid
_stricmp
_strrev
strlen
??2@YAPAXI@Z
atoi
memset
sprintf
strcat
strcpy
strcmp
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ