CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
8f98c5e33617f5f8b522459a6063b46af1510798a416b007550837d6befea106.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f98c5e33617f5f8b522459a6063b46af1510798a416b007550837d6befea106.dll
Resource
win10v2004-20220901-en
Target
8f98c5e33617f5f8b522459a6063b46af1510798a416b007550837d6befea106
Size
74KB
MD5
660e64fed53b2b4ba0d6fa29b78ca8de
SHA1
a94172bc4b99120a7bcdd4f57a88e3ca1ad84508
SHA256
8f98c5e33617f5f8b522459a6063b46af1510798a416b007550837d6befea106
SHA512
b901c3c7b2f2bbc240cb30efbc92c7a9216ab9c3bd3c86f01c0ae838c193218f94acac7b2fcd9a304498009decc925bb54d5cd934ef1c4684478ff0b610694e0
SSDEEP
1536:PSwlKC19SnIhSmettXHXirkU4Xl4lqriO5Fv4tFw:HAMwyrkVV4lQ74tFw
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE