FindUser
GetGameVersion
miniupdate
update
userfind
Static task
static1
Behavioral task
behavioral1
Sample
9d754381aaa796a231c197612dbcb590f846dba7a97b592c507864c6f006ce59.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9d754381aaa796a231c197612dbcb590f846dba7a97b592c507864c6f006ce59.dll
Resource
win10v2004-20230220-en
Target
9d754381aaa796a231c197612dbcb590f846dba7a97b592c507864c6f006ce59
Size
246KB
MD5
4479423b96a7943255595de95cd9b3fa
SHA1
1b762985f3532fc6eec6690577de84bec28cf8e7
SHA256
9d754381aaa796a231c197612dbcb590f846dba7a97b592c507864c6f006ce59
SHA512
e1877a2eaa3a2f38c897633b414f686244e534294ac1e8d2e0daf1bb72e3ae3c2da311decfa703c3c4e30ab430bd1642b4a4993d6a1d09b899d467460ab1a3f7
SSDEEP
6144:1qFzUdfmz2FFTxt4Qzk/uZp5sY8sX6fcNz:1qx2FnaQI/QzsPsX6
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapFree
GetProcessHeap
IsBadReadPtr
SetLastError
GetProcAddress
LoadLibraryA
VirtualProtect
lstrcmpiA
GetCurrentThreadId
ExitProcess
CreateFileA
SetPriorityClass
InterlockedDecrement
Process32First
GetTickCount
GetCurrentThread
WriteFile
GetDriveTypeA
OpenProcess
GlobalAlloc
WideCharToMultiByte
GetFileAttributesA
TerminateProcess
FileTimeToSystemTime
lstrcatA
GetEnvironmentVariableA
MultiByteToWideChar
SetThreadPriority
GetShortPathNameA
GlobalFree
Process32Next
GlobalMemoryStatusEx
GetModuleHandleA
CreateToolhelp32Snapshot
GetFileTime
GetDiskFreeSpaceExA
GetVersionExA
DeleteFileA
lstrcpyA
SetErrorMode
SetUnhandledExceptionFilter
CreateMutexA
ReadFile
HeapAlloc
LocalFree
InitializeCriticalSection
FlushFileBuffers
CreateFileW
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
FreeLibrary
lstrlenA
GetNativeSystemInfo
GetCurrentProcessId
CancelIo
GetModuleFileNameA
GetSystemInfo
ResetEvent
GetCurrentProcess
WinExec
InterlockedExchange
CreateProcessA
TerminateThread
CloseHandle
GetLastError
CreateEventA
Sleep
SetEvent
WaitForSingleObject
VirtualAlloc
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidLocale
VirtualQuery
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
LCMapStringW
HeapSize
RtlUnwind
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
SetHandleCount
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
GetModuleHandleW
DecodePointer
GetSystemTimeAsFileTime
HeapReAlloc
ExitThread
CreateThread
GetCommandLineA
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
EncodePointer
InitializeCriticalSectionAndSpinCount
GetUserObjectInformationA
GetLastInputInfo
wsprintfA
GetThreadDesktop
OpenInputDesktop
SetThreadDesktop
ExitWindowsEx
CloseDesktop
RegEnumValueA
CloseEventLog
RegCloseKey
AdjustTokenPrivileges
OpenEventLogA
RegOpenKeyA
CheckTokenMembership
ClearEventLogA
FreeSid
OpenProcessToken
AllocateAndInitializeSid
RegQueryInfoKeyA
RegOpenKeyExA
LookupPrivilegeValueA
LookupAccountSidA
RegQueryValueExA
RegSetValueExA
GetTokenInformation
ShellExecuteExA
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
SysFreeString
VariantInit
VariantClear
SysAllocString
send
gethostbyname
closesocket
socket
recv
setsockopt
htons
select
WSAStartup
connect
WSAIoctl
getsockname
gethostname
WSACleanup
GetModuleFileNameExA
InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
capGetDriverDescriptionA
FindUser
GetGameVersion
miniupdate
update
userfind
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ