CanUnload
RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
61941b322d986123d0a16ce8f1652315d6272218aed153d459ed8470e72159de.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
61941b322d986123d0a16ce8f1652315d6272218aed153d459ed8470e72159de.dll
Resource
win10v2004-20220812-en
Target
61941b322d986123d0a16ce8f1652315d6272218aed153d459ed8470e72159de
Size
196KB
MD5
43cc092333f48dea0eb3994131114ad0
SHA1
ce7ea5cd1257d1d74a131300dbfed6c51f5b453e
SHA256
61941b322d986123d0a16ce8f1652315d6272218aed153d459ed8470e72159de
SHA512
61dec9b5a32129b40bc806204fec33dc789a6c9fc615e6a573034d5e9d353606163e8b7532beda213f8d08914a268b751b4e1860cde1e3daa7408928e132855f
SSDEEP
3072:CaFuFY+8MkekcxOjjlVxdamZnlS0V456/ZXghLsrcP:RFua+8d6uz+mZlS0V45aZVrg
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
strrchr
strstr
_mbctype
tolower
isupper
malloc
sprintf
atol
isspace
memmove
__CxxFrameHandler
_errno
??3@YAXPAX@Z
_chsize
atoi
_initterm
_adjust_fdiv
__dllonexit
_onexit
_stricmp
rand
strncpy
_strnicmp
strchr
_purecall
??2@YAPAXI@Z
free
realloc
_fstat
_open
_creat
_unlink
_strlwr
_close
_write
_tell
_sopen
_lseek
_read
DisableThreadLibraryCalls
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
GetLastError
UnmapViewOfFile
GetSystemInfo
CharNextA
GetSystemMetrics
CanUnload
RMACreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE