RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
f48245b0ff8882e0d91987d268d041f5973375ac0860c2d9bec59092df9cf8ae.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f48245b0ff8882e0d91987d268d041f5973375ac0860c2d9bec59092df9cf8ae.dll
Resource
win10v2004-20220812-en
Target
f48245b0ff8882e0d91987d268d041f5973375ac0860c2d9bec59092df9cf8ae
Size
148KB
MD5
80dd9cb40d3273c919cc60cad2cc70b8
SHA1
572e50b68ce7eed55b18116391cf66f29f261f26
SHA256
f48245b0ff8882e0d91987d268d041f5973375ac0860c2d9bec59092df9cf8ae
SHA512
e5a61c93146d072a753946bd90a4526bbf33d24bb5a8aecb8b55792708046ea3904894a4e2e7bd88432a63a5c00206bcaf9d8f948d24ff6982de1829e2956560
SSDEEP
3072:17jY1OTeijHd2S1VbLIRfwWlAgX6c5eMULuzox5:21ajZPWwWagXl5XULu+
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
_onexit
_initterm
_adjust_fdiv
malloc
realloc
free
_stricmp
__dllonexit
_putenv
strstr
??2@YAPAXI@Z
strrchr
printf
rand
_purecall
??3@YAXPAX@Z
strchr
DisableThreadLibraryCalls
MultiByteToWideChar
SetErrorMode
FreeLibrary
LoadLibraryA
GetCurrentProcessId
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
InterlockedIncrement
MessageBoxA
GetWindowThreadProcessId
FindWindowExA
ClientToScreen
GetWindowRect
GetLastActivePopup
GetActiveWindow
GetSystemMetrics
CharNextA
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE