CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
f938f2e4be4e2bf04fbc0ea7c5bf95b4d17086dcb8af8b3e6ef07cf32572123e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f938f2e4be4e2bf04fbc0ea7c5bf95b4d17086dcb8af8b3e6ef07cf32572123e.dll
Resource
win10v2004-20220812-en
Target
f938f2e4be4e2bf04fbc0ea7c5bf95b4d17086dcb8af8b3e6ef07cf32572123e
Size
60KB
MD5
66f7e9caca56da590935766c0e679410
SHA1
6aa8e6634025503c2ebbfd818e32ae299ad7b79d
SHA256
f938f2e4be4e2bf04fbc0ea7c5bf95b4d17086dcb8af8b3e6ef07cf32572123e
SHA512
d2d20e162b435378100121bf040257cb143f742c3ea2d1d354e794be8455e8d60ae31f2b306d3fd96e73e47f9635ae168d0703daaa7d987919f81f289306a5a8
SSDEEP
1536:BfQAl+7ovOb3eDPz93giQrJLS30nrfmi4o+2vdGTpMlP:dQAl+pbYqJe3wfmu+PMlP
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE