RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
0bf9244b3d7c9d0096a8cfdfdae9b09ced8972cff62c1ea3fb6ab059148dbcd9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bf9244b3d7c9d0096a8cfdfdae9b09ced8972cff62c1ea3fb6ab059148dbcd9.dll
Resource
win10v2004-20220812-en
Target
0bf9244b3d7c9d0096a8cfdfdae9b09ced8972cff62c1ea3fb6ab059148dbcd9
Size
104KB
MD5
835a82d68ab4b55e9e70950cb23b5de0
SHA1
e838e5de337cace8a0027d3b2ade78986d90ebde
SHA256
0bf9244b3d7c9d0096a8cfdfdae9b09ced8972cff62c1ea3fb6ab059148dbcd9
SHA512
7bda6a03c6bd8e701634926a3de38f24e2de18b3d7a209257c54a4165c64bebfd9cb6c052e1ecce0f6ab3e4379e2dbcf6f830c21c41c30b6b36eb5ef4fe96085
SSDEEP
1536:BZ3IJen2YPyoymUsIsirXel2GZpHfhHkuHmPPLYsVlXr/Qp:BVImDzWruV1ePcClrC
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
free
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_onexit
realloc
malloc
strncpy
_strnicmp
_ftol
iscntrl
isspace
??2@YAPAXI@Z
strstr
_purecall
__dllonexit
_strcmpi
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE