DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetDllAutoHelpObject
GetDllAutoHelpObjectEx
REClearROT
RECreateObjectLoader
RECreateROT
REGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
b98a7df1532f0cc518fb30be822b9bf43b7d699e6c474df72df601563c6cf41d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b98a7df1532f0cc518fb30be822b9bf43b7d699e6c474df72df601563c6cf41d.dll
Resource
win10v2004-20220812-en
Target
b98a7df1532f0cc518fb30be822b9bf43b7d699e6c474df72df601563c6cf41d
Size
1.1MB
MD5
180f358cf31f389656832f22f286a2c2
SHA1
a1b556d0409b90ef846f82042989fe617f6961ab
SHA256
b98a7df1532f0cc518fb30be822b9bf43b7d699e6c474df72df601563c6cf41d
SHA512
7ac96c0871fa5536ba62c1d9465bca435633462434a54c9cd0196dc06392caf5f4ab8e8425544e721792d724cbe76378e08ae1c72b45c59b979b95e1a9e76527
SSDEEP
12288:zRRgiL7EnPvufj9KbIGU2I8iJqJSuSZGozjwG+OJ3WyvzRi66b9+u6kaiJyMefjG:zjgAEPviOIGU0SuSsDJqRSTIEMUGzq
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
MoveFileA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
SetEndOfFile
FlushFileBuffers
SetFilePointer
DeleteFileA
FileTimeToSystemTime
FindClose
FindFirstFileA
GetFileAttributesA
WritePrivateProfileStringA
SetErrorMode
ReleaseMutex
FlushViewOfFile
CreateMutexA
ReadFile
UnlockFile
LockFile
GetProcAddress
FreeLibrary
GetSystemTime
Sleep
GetSystemTimeAsFileTime
TlsSetValue
TlsGetValue
TlsAlloc
LockFileEx
AreFileApisANSI
GetFileAttributesW
DeleteFileW
GetTempPathW
GetFullPathNameA
GetFullPathNameW
FlushInstructionCache
LoadLibraryW
CreateFileW
GetVersion
GetEnvironmentVariableA
SetLastError
SetEvent
OpenEventA
CreateProcessA
CreateEventA
GetTickCount
GetCurrentThreadId
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
WaitForSingleObject
TerminateThread
IsDBCSLeadByte
lstrcpynA
CreateThread
GetModuleHandleA
lstrcmpiA
GetProcessHeap
HeapFree
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetModuleFileNameA
lstrlenA
lstrcpyA
GetLastError
QueryPerformanceCounter
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
SuspendThread
TerminateProcess
ExpandEnvironmentStringsA
SearchPathA
GetLongPathNameA
GetShortPathNameA
GetCurrentDirectoryA
GetSystemDirectoryA
DeviceIoControl
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32First
Module32Next
OpenProcess
CreateDirectoryA
GetPrivateProfileStringA
GetFileAttributesExA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceExA
GetTempPathA
FindResourceA
SizeofResource
LoadResource
LockResource
CreateFileA
WriteFile
CloseHandle
HeapAlloc
OpenMutexA
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LoadLibraryA
InterlockedExchange
ReadProcessMemory
GetLogicalDrives
GetDriveTypeA
GetPrivateProfileSectionA
CreateFileMappingW
FindFirstFileW
SetFileAttributesW
GetFileInformationByHandle
GetWindowsDirectoryW
GetWindowsDirectoryA
GetFileTime
MoveFileW
CopyFileW
CopyFileA
FindNextFileW
FindNextFileA
GetFileType
RemoveDirectoryW
CreateDirectoryW
RemoveDirectoryA
MoveFileExA
lstrcmpA
DefWindowProcA
CharNextA
PtInRect
UnionRect
SetWindowPos
GetParent
EndPaint
GetClientRect
DestroyWindow
PostMessageA
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
GetDC
LoadBitmapA
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetKeyState
IsWindow
InvalidateRect
ShowWindow
SendMessageA
SetFocus
IsChild
UnregisterClassA
BeginPaint
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
CreateWindowExA
GetFocus
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
GetObjectA
CreateCompatibleDC
SelectObject
StretchBlt
DeleteObject
GetDeviceCaps
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateDCA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyW
RegDeleteValueA
RegDeleteValueW
RegEnumKeyExW
RegEnumValueA
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegGetKeySecurity
RegSetKeySecurity
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
GetFileSecurityA
GetFileSecurityW
SetFileSecurityA
SetFileSecurityW
RegOpenKeyA
SHGetFolderPathA
SHGetFileInfoA
CoInitialize
CoCreateGuid
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateOleAdviseHolder
CreateDataAdviseHolder
CoTaskMemAlloc
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
StringFromCLSID
CoCreateInstance
CoUninitialize
StringFromGUID2
CoTaskMemFree
VariantInit
VarUI4FromStr
VariantChangeType
SetErrorInfo
CreateErrorInfo
VariantClear
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
LoadRegTypeLi
OleCreatePropertyFrame
SysAllocStringByteLen
SysStringByteLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
PathFileExistsA
SHDeleteKeyA
SHDeleteKeyW
PathRemoveFileSpecA
PathSkipRootA
PathFindExtensionA
?_Nomemory@std@@YAXXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@V312@0@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIID@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
wctype
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
memset
_callnewh
__security_error_handler
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
_strnicmp
_strupr
strchr
_mbscmp
malloc
free
_resetstkoflw
_except_handler3
_CxxThrowException
??3@YAXPAX@Z
wcsncpy
_mbschr
__CxxFrameHandler
??_V@YAXPAX@Z
_purecall
realloc
_wcsicmp
_mbsrchr
_vscprintf
vsprintf
memmove
atoi
sprintf
_snprintf
_snscanf
rand
srand
time
_mbsnbcpy
_mbsicmp
_ultoa
strncmp
_strlwr
_msize
_mbsupr
wcsncmp
wcschr
wcslen
_itoa
_gcvt
_fpclass
_i64toa
_ui64toa
_snwprintf
_strtoi64
_strtoui64
_errno
_HUGE
strtod
wcscmp
_wtoi
iswspace
_mbsinc
_ismbcspace
_mbsstr
_mbsicoll
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
isdigit
isspace
isxdigit
localtime
tolower
isalnum
strncpy
toupper
fclose
fread
ftell
fseek
fopen
fwrite
strrchr
strstr
_stricmp
swscanf
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
_isctype
wctomb
_strdup
_mbslwr
_mbsnbicmp
_ismbcalpha
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
InternetReadFile
InternetCloseHandle
HttpQueryInfoA
InternetConnectA
InternetSetOptionA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetAttemptConnect
InternetCrackUrlA
HttpAddRequestHeadersA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetDllAutoHelpObject
GetDllAutoHelpObjectEx
REClearROT
RECreateObjectLoader
RECreateROT
REGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ