RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
99a984e80d0a8520a77ad8da174e44307e9383dc1b684a64f1c07a9dfe49adbf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99a984e80d0a8520a77ad8da174e44307e9383dc1b684a64f1c07a9dfe49adbf.dll
Resource
win10v2004-20220812-en
Target
99a984e80d0a8520a77ad8da174e44307e9383dc1b684a64f1c07a9dfe49adbf
Size
104KB
MD5
6be89b38c9899a5fbc75ecd9457b14d0
SHA1
e77dde0eb30d053dbead06801c7689d5a5f577e9
SHA256
99a984e80d0a8520a77ad8da174e44307e9383dc1b684a64f1c07a9dfe49adbf
SHA512
05218bdf69d495ae398cab1f82c956b03362fcd7ded88126af2a1f57d5a76da182707f8298d63807b7d3e0fd7d9a82ef62a1681d0ffcf44eeedc58f697264797
SSDEEP
1536:BZ3IJen2ZTjabIceBiyPK0HEvRihLArBQHHe+V632hXY:BVIm8i0ceBbP/NArgV6IY
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
free
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_onexit
realloc
malloc
strncpy
_strnicmp
_ftol
iscntrl
isspace
??2@YAPAXI@Z
strstr
_purecall
__dllonexit
_strcmpi
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE