CanUnload
RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
db4fa074d520d26b2dbc679cfb2b7e5e4b85fb72fc03ae1c621d7b2899554a39.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db4fa074d520d26b2dbc679cfb2b7e5e4b85fb72fc03ae1c621d7b2899554a39.dll
Resource
win10v2004-20220812-en
Target
db4fa074d520d26b2dbc679cfb2b7e5e4b85fb72fc03ae1c621d7b2899554a39
Size
264KB
MD5
911ae1247224e1bcdf657be51780f5e3
SHA1
e9ec03dbc71adb782cef910e8bcb05838e098ab1
SHA256
db4fa074d520d26b2dbc679cfb2b7e5e4b85fb72fc03ae1c621d7b2899554a39
SHA512
f45be768b18f94c7c3cdafcf10478c33e844232e94a2300c095424a6bc5552afaf8a91279d92ddbdf778e4cd126c1b0602152c3347e768c489634c3599bf2542
SSDEEP
3072:aJe4E/Sl3Zy+1BmFfYIDxFPHBbd0mqcWv4A3vEx+LOvWyVUxGKHhdIA/fmPhyhUK:VAl3w1/jVdGx3vExmOv+GW+A9h+e5
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
malloc
_initterm
free
_adjust_fdiv
__dllonexit
_ftol
??2@YAPAXI@Z
_mbctype
atoi
memchr
memmove
sprintf
??3@YAXPAX@Z
_onexit
_purecall
GetSystemMetrics
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CanUnload
RMACreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE