DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a2d0e91f5d19d6905db44b62eafa14c342713dbfbfe24123287b27b720cbf7e9.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a2d0e91f5d19d6905db44b62eafa14c342713dbfbfe24123287b27b720cbf7e9.dll
Resource
win10v2004-20220812-en
Target
a2d0e91f5d19d6905db44b62eafa14c342713dbfbfe24123287b27b720cbf7e9
Size
236KB
MD5
bc9820c76d609d5532b33a1a78fb4af2
SHA1
2f90b66f887001eb72f19d9bac49aec6e86e40b8
SHA256
a2d0e91f5d19d6905db44b62eafa14c342713dbfbfe24123287b27b720cbf7e9
SHA512
5ffc368257e68a41b52d08f1cda68f8eaf10f5670d7bb5da8adcc2a826bbfc9a7631fdc6233580f3e8803c2dd50de5f3691b2cab1db0e42dbad1f552de0c2198
SSDEEP
3072:K+ym5/IcwOXSp7ySpZUJghnSeVFJDHUkq47iiA8lvlcyG0:K+ym5QcwOXO7egJD0kq4c+OyG0
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetLastError
lstrlenA
lstrcmpiA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WaitForSingleObject
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
lstrcpynA
InterlockedIncrement
RaiseException
IsDBCSLeadByte
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
lstrcpyA
lstrcatA
LocalFree
CreateFileA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedDecrement
InterlockedExchange
GetStringTypeA
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ReadFile
WriteFile
CloseHandle
SetUnhandledExceptionFilter
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetCommandLineA
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
HeapDestroy
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
SysFreeString
VariantInit
VariantClear
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysAllocString
RegisterTypeLi
UnRegisterTypeLi
PathFindExtensionA
inet_addr
WSAGetLastError
ntohs
WSACleanup
WSACloseEvent
WSAEnumNetworkEvents
WSAConnect
gethostbyname
WSASocketA
closesocket
WSAStartup
WSACreateEvent
WSASetEvent
WSAEventSelect
WSARecv
WSAResetEvent
inet_ntoa
htonl
getservbyname
htons
gethostbyaddr
WSAGetOverlappedResult
getservbyport
WSASend
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE