DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UnInstall
Static task
static1
Behavioral task
behavioral1
Sample
dd6f2ec311f3f95f73b8114d8b50353385526372005309a073a529ac6f037d92.dll
Resource
win7-20220812-en
Target
dd6f2ec311f3f95f73b8114d8b50353385526372005309a073a529ac6f037d92
Size
292KB
MD5
868a3ffb2b5afe0a2d3d410df93a5150
SHA1
928ecd4440f02e715154223d8b2401a5062900a0
SHA256
dd6f2ec311f3f95f73b8114d8b50353385526372005309a073a529ac6f037d92
SHA512
931bfb72ba36a16f1e5a0f624c7d5aa64c37fc38b5fde0e9450f0c2e403c8ea26453a322650321d0d5d0f3e13ff2ed610318bd798af8e27cfd9081458eda0cef
SSDEEP
6144:oQ0yVengOT+dpZUyrWXUPiJXk3ujRiFLQt:oQ0jng1dpZUcWXUPiJXk3uQJQ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryExW
CreateThread
GetLastError
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetModuleFileNameW
MultiByteToWideChar
lstrcmpiW
RaiseException
SetThreadLocale
GetThreadLocale
FindResourceW
GetVersionExW
GetWindowsDirectoryW
WinExec
OpenProcess
lstrlenA
GetProcAddress
LoadLibraryW
FreeLibrary
SizeofResource
LoadResource
LockResource
CreateFileW
WriteFile
CloseHandle
GetTickCount
LeaveCriticalSection
FindResourceExW
EnterCriticalSection
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapSize
Sleep
VirtualAlloc
VirtualFree
HeapCreate
ExitProcess
HeapDestroy
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetProcessHeap
GetVersionExA
GetCommandLineA
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
HeapFree
InterlockedExchange
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
RtlUnwind
EnumWindows
CharNextW
MessageBoxW
CharLowerA
CharLowerW
PostMessageW
GetWindowThreadProcessId
UnregisterClassA
IsTextUnicode
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
SHGetFolderPathW
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoGetClassObject
StringFromGUID2
CoCreateInstance
VarUI4FromStr
RegisterTypeLi
VarBstrCat
SysFreeString
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VarBstrCmp
LoadRegTypeLi
LoadTypeLi
SysStringLen
VariantClear
UnRegisterTypeLi
NdrOleFree
NdrOleAllocate
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubForwardingFunction
InternetGetCookieW
InternetSetCookieW
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile
CoInternetGetSession
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
EnumProcessModules
EnumProcesses
GetModuleBaseNameW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UnInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ