RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
4d8b9152678d4014102a7314f6c998b411f9efc800a0ad347c4ca8b22b545ccd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d8b9152678d4014102a7314f6c998b411f9efc800a0ad347c4ca8b22b545ccd.dll
Resource
win10v2004-20220901-en
Target
4d8b9152678d4014102a7314f6c998b411f9efc800a0ad347c4ca8b22b545ccd
Size
148KB
MD5
84ca182e4690e3ebff05d6f22fd08aee
SHA1
28f3b691fc795209095c23f777ac59f79ac51f42
SHA256
4d8b9152678d4014102a7314f6c998b411f9efc800a0ad347c4ca8b22b545ccd
SHA512
7f4f540fe533e889d4fad7cf7926fdcedcd695b2218a4b0865b35145fc4f32d4d58f90d019ec5abb2053a6691979be29adaa8205e58e0107c1c6b88be6cb69a9
SSDEEP
3072:17jY1OTeijHd2S1VbLI0bNbKpJDOKorkHtYG6yuon:21ajZP3bNbcmG6Qn
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
_onexit
_initterm
_adjust_fdiv
malloc
realloc
free
_stricmp
__dllonexit
_putenv
strstr
??2@YAPAXI@Z
strrchr
printf
rand
_purecall
??3@YAXPAX@Z
strchr
DisableThreadLibraryCalls
MultiByteToWideChar
SetErrorMode
FreeLibrary
LoadLibraryA
GetCurrentProcessId
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
InterlockedIncrement
MessageBoxA
GetWindowThreadProcessId
FindWindowExA
ClientToScreen
GetWindowRect
GetLastActivePopup
GetActiveWindow
GetSystemMetrics
CharNextA
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE