CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
21224cc72835966f13572360545963b529e403a9f22778dd8e7cdbc73d1c70a9.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21224cc72835966f13572360545963b529e403a9f22778dd8e7cdbc73d1c70a9.dll
Resource
win10v2004-20220901-en
Target
21224cc72835966f13572360545963b529e403a9f22778dd8e7cdbc73d1c70a9
Size
66KB
MD5
558ef8a4999ddcba79645ce21801bf08
SHA1
1191a6eafdd4839fe7b7a28186a16f1e97f0453e
SHA256
21224cc72835966f13572360545963b529e403a9f22778dd8e7cdbc73d1c70a9
SHA512
cf8639ff64e761a49cbb76776c5bf4ec783096506c6413a7f5b434b32ab2cacb3fd390571aca0a40c8f87a3d266c5c01f92546c640dc31306501d3726d5bf0bb
SSDEEP
1536:vSwlKC19SnIhSmnoRaeG8V3irRlobNHUz4LT54gX5/oJfi95E:nAMogeLkLoJHUsTp5gJic
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE