DeinitServerExtension
InitServerExtension
ReflectiveLoader
Static task
static1
Behavioral task
behavioral1
Sample
2971a8051f52cafdec8054d22f856e64405f7cbac4814dbef3de2ac6fe3a2b1b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2971a8051f52cafdec8054d22f856e64405f7cbac4814dbef3de2ac6fe3a2b1b.dll
Resource
win10v2004-20220812-en
Target
2971a8051f52cafdec8054d22f856e64405f7cbac4814dbef3de2ac6fe3a2b1b
Size
296KB
MD5
8a1b289fc90c19ada32d4ece8af45404
SHA1
199721b44a02524aa13b7c65bd3c2506372d4cf7
SHA256
2971a8051f52cafdec8054d22f856e64405f7cbac4814dbef3de2ac6fe3a2b1b
SHA512
89fde210134e70edd74e39466e0bd171a3d8e67b4032d2b4dde6b7fc2bf53b3f61647725fe3179fdd2cc86a618cdd3374976bcfdabd4d1ba72214f05a5ee8e62
SSDEEP
6144:b/FmdtUm7H9WNG9VxviI4GT+z0YphDDvI3EtpOXg42ZwPGb91:5Atis9iIxTby6j2aOb91
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
htons
ntohl
htonl
CreateEventA
DeviceIoControl
SetEvent
WaitForMultipleObjects
ReleaseSemaphore
CreateSemaphoreA
Sleep
WaitForSingleObject
InitializeCriticalSection
WaitForSingleObjectEx
TerminateThread
CreateThread
SetThreadPriority
GetCurrentProcess
GetCurrentThreadId
GetVersionExA
GetSystemInfo
CompareStringW
CreateFileA
CreateFileW
GetSystemDirectoryW
PostQueuedCompletionStatus
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryW
FreeLibrary
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalReAlloc
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
VirtualProtect
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetQueuedCompletionStatus
CloseHandle
CreateIoCompletionPort
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
PulseEvent
SetUnhandledExceptionFilter
ExitProcess
ExitThread
ResetEvent
FlushFileBuffers
GetTickCount
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
CreateMutexA
ReleaseMutex
LoadLibraryA
ResumeThread
LocalAlloc
RaiseException
FlsSetValue
GetCommandLineA
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetModuleHandleW
HeapSetInformation
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
HeapSize
GetLocaleInfoW
RegOpenKeyExW
QueryServiceConfigW
CreateServiceW
ChangeServiceConfigW
QueryServiceStatus
StartServiceW
OpenServiceW
UnlockServiceDatabase
LockServiceDatabase
CloseServiceHandle
OpenSCManagerW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
DeinitServerExtension
InitServerExtension
ReflectiveLoader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ