CVgwMRO
DllRegisterServer
DllUnregisterServer
ThByWELkRL
bIifZYMHNQVu
dYLVnSKdFHgAJp
jiLNpotibCvXqRq
nfkpTkO
Static task
static1
Behavioral task
behavioral1
Sample
gnGAuyvrQtRKWaK.dll
Resource
win7-20220812-en
Target
gnGAuyvrQtRKWaK.dll
Size
591KB
MD5
23c006979384ba64e43b9d63c7cef234
SHA1
b70ee5d1cdbd633d7268513eee606469d1dbc470
SHA256
d88e42bc464cbafa46911e24bfe6762034a002cdc5518fa5ff24f34fb0fab90a
SHA512
c6c47b553cdf68675b8e551f36d241662c4f7f5011cbb37d5381adccd2d2ab19fcebe7ca981c57894817645ff1c5f8b909eb44d49e8c0064cede5848274365f3
SSDEEP
6144:zKUMJfdFqzj/HwBjCwruDr3XEkRj0PKXaAm9WhkIaORowoHsODjFb84v:NMJfd0H/6Yr3XERPKXauCIaOaMOlw4v
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CloseHandle
CreateFileW
OutputDebugStringW
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
WriteConsoleW
HeapReAlloc
HeapSize
GetStringTypeW
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
SetStdHandle
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
RtlUnwind
EndPaint
BeginPaint
UpdateWindow
PostQuitMessage
LoadCursorW
GetMessageW
DefWindowProcW
DestroyWindow
CreateWindowExW
RegisterClassExW
LoadStringW
ShowWindow
DispatchMessageW
MessageBoxA
TranslateAcceleratorW
TranslateMessage
CoUninitialize
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoLoadLibrary
CoInitialize
CryptStringToBinaryA
CVgwMRO
DllRegisterServer
DllUnregisterServer
ThByWELkRL
bIifZYMHNQVu
dYLVnSKdFHgAJp
jiLNpotibCvXqRq
nfkpTkO
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ