CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
ef1b40bd13f15ac5a8e2235aafe0d2eac9a2e625ac59aed692650b804ab0a9d6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef1b40bd13f15ac5a8e2235aafe0d2eac9a2e625ac59aed692650b804ab0a9d6.dll
Resource
win10v2004-20220901-en
Target
ef1b40bd13f15ac5a8e2235aafe0d2eac9a2e625ac59aed692650b804ab0a9d6
Size
59KB
MD5
7229e1a9ab208905b029014baa2bb501
SHA1
961017c1ac033fcd8e8466e9700f722b1933b8c0
SHA256
ef1b40bd13f15ac5a8e2235aafe0d2eac9a2e625ac59aed692650b804ab0a9d6
SHA512
5ae27aad0502d1d6d06b060dfcc65e742e51ddb7f61fb61198726501a0ce623a78892be1b2f7513cec1144b33308c89e94e2bfddfb8ddab6b9cf0da77689638c
SSDEEP
1536:PSwlKC19SnIhSmetgsepVTU5e0pnHbJz4iOt9OY4N:HAMhsepVTURHdz4TC
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE