CanUnload
RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
e2160242c22934ad6fe64b3096a1fe058c5f85b4a312816e077f9b9e9efbcd95.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2160242c22934ad6fe64b3096a1fe058c5f85b4a312816e077f9b9e9efbcd95.dll
Resource
win10v2004-20220812-en
Target
e2160242c22934ad6fe64b3096a1fe058c5f85b4a312816e077f9b9e9efbcd95
Size
128KB
MD5
616d95fd048a0e2eb97dc5eff90363e2
SHA1
7296768887f74dda13a4aa009c5d52fa9970915c
SHA256
e2160242c22934ad6fe64b3096a1fe058c5f85b4a312816e077f9b9e9efbcd95
SHA512
0dfc2bf8ce308564a7a66010b50e9f166f482b0025409065708d617c1ec6a8fad1cc6dfaddd4879b675d0861d1e96cf1e222760fdbb3e94db629572abf1aae7e
SSDEEP
3072:fuxmo8kkjOtgfCMCbsilpIulwS1W1AFGrshd1tEzb:k8koOt60twD1UGruJi
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_unlock
__dllonexit
_lock
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
free
memset
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_adjust_fdiv
_onexit
LoadLibraryA
GetProcAddress
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
CanUnload
RMACreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ