DllRegisterServer
KXI
MHx229
Tin22PP
Vaevy8305
Static task
static1
Behavioral task
behavioral1
Sample
norfolk.db.dll
Resource
win7-20220812-en
Target
norfolk.db.dll
Size
376KB
MD5
482a3d7a420b96a86c7cba3e05b5670b
SHA1
ddc91ac456724770d5cb58ea9f0762f81a295487
SHA256
3879da0449c26d57425403ae90cd0d2065b974c1c791d974a9bbd0779f9a68ee
SHA512
1ce6a340d95dabfc158f721ad7952102ff6670009ac7823abfd21d352d390b4e94a5999df57abee730e6cacb7923dc650f46990ed24ce0c5b6a8212c6ff52826
SSDEEP
6144:DT1WOGkH9+qJJHMl3yifLLi0epLihYRl/r82HV9kHpjFWBk3WScE2pQdfPnb4dRG:DsRw9DJpApXQRihGl/Zg8Qg1C
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStdHandle
GetCurrentDirectoryA
CreateFileA
SetFilePointer
CloseHandle
GetLastError
PeekNamedPipe
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
ExitProcess
CreateThread
GetCurrentThreadId
GetSystemDirectoryA
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateNamedPipeA
GetCurrentActCtx
DllRegisterServer
KXI
MHx229
Tin22PP
Vaevy8305
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ