DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c706ea9d62ff87d171cac90d6e878c5ef8f44b1748090b1ba8242a989dace4f3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c706ea9d62ff87d171cac90d6e878c5ef8f44b1748090b1ba8242a989dace4f3.dll
Resource
win10v2004-20221111-en
Target
c706ea9d62ff87d171cac90d6e878c5ef8f44b1748090b1ba8242a989dace4f3
Size
205KB
MD5
86d63aaf443aa2d1f1f5164acb96b08a
SHA1
65ba2d4c3a5164615de3efd34e87e436c1a7df02
SHA256
c706ea9d62ff87d171cac90d6e878c5ef8f44b1748090b1ba8242a989dace4f3
SHA512
9c6a5066aaf92711567b63072d14b0907cbaa51e6f469f33e7f06e2d66faa335981faf39960949c5cc8cc29d70de420d587714c931d305878116bae267c7f3a6
SSDEEP
3072:qXsFRTS+DrIF+TQ9NM/01D3lzwUr2SRAxjcWS90gAnt:wsjSmf4N/9fyHZ
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFilePointer
CreateFileW
GetWindowsDirectoryW
GetTickCount
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
WriteFile
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
GetSystemTime
GetTempFileNameW
CreateProcessW
GetFileSize
ReadFile
WideCharToMultiByte
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
CreateFileA
CloseHandle
CreateThread
Sleep
FormatMessageW
lstrlenW
LocalAlloc
OpenEventW
SetEvent
SizeofResource
LocalFree
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetConsoleMode
FreeEnvironmentStringsA
HeapSize
LCMapStringW
CompareStringA
FlushFileBuffers
SetStdHandle
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
MessageBoxW
CharNextW
PostMessageW
UnregisterClassA
HttpSendRequestW
InternetCloseHandle
HttpAddRequestHeadersW
InternetConnectW
InternetAttemptConnect
HttpOpenRequestW
InternetReadFile
HttpQueryInfoW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
InternetOpenW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE