DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fe725a6a87c8217c295943c3d9aa12fcb29ad893a677421cc233650edc3d3532.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe725a6a87c8217c295943c3d9aa12fcb29ad893a677421cc233650edc3d3532.dll
Resource
win10v2004-20220901-en
Target
fe725a6a87c8217c295943c3d9aa12fcb29ad893a677421cc233650edc3d3532
Size
551KB
MD5
41ff1c786cc33b52990699dd3b3cf4d0
SHA1
a1706d26090e8435417e4c6f2e5c7dc53246167f
SHA256
fe725a6a87c8217c295943c3d9aa12fcb29ad893a677421cc233650edc3d3532
SHA512
7b327aa18a18c54d3e7492f63b57f5f28a07f9d95b56e26d539a14e779cc6c791c8754e052a73dcce66a7943f5581c5028cb538d7ba6acd607b641b95bbd88a6
SSDEEP
6144:ASJ9v8KEllI+hxlSbwpVJrDICQBsOd1ub3:ASJ9vVkI+hCbUJ/I4D
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WTSEnumerateSessionsW
WTSFreeMemory
WTSEnumerateProcessesW
VirtualFree
GetCommandLineA
RtlUnwind
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
DeleteFileW
FindFirstFileW
FindClose
CreateDirectoryW
CloseHandle
lstrlenW
CreateFileW
ReadFile
WriteFile
SetFilePointer
IsBadCodePtr
GetLastError
GetFileSize
GetCurrentThreadId
EnterCriticalSection
ResetEvent
ReleaseMutex
lstrcmpiW
MultiByteToWideChar
FreeLibrary
LeaveCriticalSection
VirtualQuery
InitializeCriticalSection
SizeofResource
LoadResource
DisableThreadLibraryCalls
DeleteCriticalSection
CreateThread
FindResourceW
RaiseException
SetThreadPriority
LoadLibraryExW
SetEvent
InterlockedIncrement
WaitForMultipleObjects
WaitForSingleObject
GetModuleFileNameW
InterlockedDecrement
GlobalAlloc
GlobalFree
CreateEventW
ExitThread
Sleep
GetTickCount
WideCharToMultiByte
TerminateThread
GetComputerNameW
CreateMutexW
HeapFree
HeapSize
HeapValidate
GetProcessHeap
HeapAlloc
Process32FirstW
CreateToolhelp32Snapshot
Process32NextW
OpenProcess
GetSystemTimeAsFileTime
LoadLibraryA
GetProcAddress
CreateEventA
OpenEventA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetSystemInfo
GetModuleHandleA
VirtualAlloc
TlsGetValue
VirtualProtect
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleHandleW
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetCPInfo
HeapCreate
HeapDestroy
ExitProcess
GetModuleFileNameA
GetStdHandle
SetLastError
TlsFree
TlsSetValue
TlsAlloc
GetVersionExA
UnregisterClassA
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RevertToSelf
GetUserNameW
ImpersonateLoggedOnUser
OpenProcessToken
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
SHGetFolderPathW
SHGetSpecialFolderPathW
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
VarBstrCmp
SysStringByteLen
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VarBstrCat
VariantInit
VariantClear
SafeArrayDestroy
SafeArrayGetElement
LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
RegisterTypeLi
SysAllocString
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
PathAppendW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ