CanUnload
RMACreateInstance
RMAShutdown
TFileSys_GetLastError
Static task
static1
Behavioral task
behavioral1
Sample
4bc15c9a426f565d133bfb77bf15b95fb3c3f55fcd7033bced713dd85fb89fb8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4bc15c9a426f565d133bfb77bf15b95fb3c3f55fcd7033bced713dd85fb89fb8.dll
Resource
win10v2004-20220812-en
Target
4bc15c9a426f565d133bfb77bf15b95fb3c3f55fcd7033bced713dd85fb89fb8
Size
116KB
MD5
63d9eee8953283df1473f3383d9977ee
SHA1
55f64e50975a381cfeef995beb75d8ea57283ddd
SHA256
4bc15c9a426f565d133bfb77bf15b95fb3c3f55fcd7033bced713dd85fb89fb8
SHA512
39b5f6bf4bc292ccfa3e681d9644c80f15139b0dcfd91c02d70dd66ce9f93b7e5c19553c42de9d07df867f922cb1ea1f64a95d5b1f3af1d446397afc66cf6b01
SSDEEP
1536:QehZgX7wRtDX7FqkgPez0RzrGnIoo2a7Wnt/CcLNHYzgHyMsjTcuuvUMK+JuVyyp:QeTgXCtr7FqgmGsF7Ct/CcqhnbUX
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_vsnprintf
_ismbcspace
memmove
atol
strncpy
strtok
_strnicmp
strchr
realloc
isdigit
_findfirst
_findnext
_findclose
??3@YAXPAX@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit
free
malloc
sprintf
rename
_splitpath
strrchr
_purecall
fread
??2@YAPAXI@Z
fclose
strstr
ftell
_fsopen
fseek
strncmp
_stricmp
_strlwr
_strcmpi
_unlink
_fstat
_mkdir
_stat
_fileno
DisableThreadLibraryCalls
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
lstrcpyA
CharNextA
CharUpperA
GetSystemMetrics
RegQueryValueExA
RegOpenKeyA
RegCloseKey
timeKillEvent
timeSetEvent
CanUnload
RMACreateInstance
RMAShutdown
TFileSys_GetLastError
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE