COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
79a77077573d5ad34dfb301c14442cfc31e992abe0985501c2b8ade1cbfa9f0d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79a77077573d5ad34dfb301c14442cfc31e992abe0985501c2b8ade1cbfa9f0d.dll
Resource
win10v2004-20221111-en
Target
79a77077573d5ad34dfb301c14442cfc31e992abe0985501c2b8ade1cbfa9f0d
Size
40KB
MD5
57a23200101fdf772c77f3db56b58900
SHA1
c9b8950c5839fccef0ece5598da0c56bd5972a7d
SHA256
79a77077573d5ad34dfb301c14442cfc31e992abe0985501c2b8ade1cbfa9f0d
SHA512
47e4c7e44bd7a03dc4dd5f961b8b0cead3568edef4261b63f1ae6f185738b4bdf839807c4c39935e40f5df52b2336bcfc8287680e24589bb11e213cb1958a07d
SSDEEP
768:6x8RDiAPBZEQvJf7eAO7wTEpSoX+hP6fWBoREfT4T/ZQ:6xUDJvJfKn7wTuluhKaoRiT4Ta
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateThread
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
DeleteFileA
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
SetFileAttributesA
GetCommandLineA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
Sleep
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA
GetSystemDirectoryA
GetWindowsDirectoryA
WritePrivateProfileStringA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
GetClassNameA
GetClientRect
CallWindowProcA
GetDC
GetWindowRect
ReleaseDC
GetWindowTextA
GetParent
GetWindowThreadProcessId
wsprintfA
EnumWindows
GetDesktopWindow
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
SHFileOperationA
GdiplusShutdown
GdipLoadImageFromFile
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
connect
htons
inet_addr
gethostbyname
inet_ntoa
WSAStartup
socket
WSACleanup
send
recv
closesocket
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
strrchr
strchr
_access
strncpy
strstr
abs
malloc
wcscmp
memcpy
__CxxFrameHandler
sscanf
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strlwr
_getpid
_stricmp
_strrev
strlen
??2@YAPAXI@Z
atoi
memset
sprintf
strcat
strcpy
strcmp
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ