CanUnload
RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
cc1c9aaeae915042e4138128d9c51488dfc5d83e7b3592c422e522e613208621.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cc1c9aaeae915042e4138128d9c51488dfc5d83e7b3592c422e522e613208621.dll
Resource
win10v2004-20220812-en
Target
cc1c9aaeae915042e4138128d9c51488dfc5d83e7b3592c422e522e613208621
Size
176KB
MD5
932c9614551fd088b34c83eb99b1d089
SHA1
6edcd6f6dd7ad09582f951d59e551ec550aa5ade
SHA256
cc1c9aaeae915042e4138128d9c51488dfc5d83e7b3592c422e522e613208621
SHA512
bd4b50e0f05a1e00734e6876210c3db1c0696ab41da9a28b957d461e2ef3ffb0c236d0e23a07b62514d55e5dbbc718954ae01cae4da1b923da732d652b9f4124
SSDEEP
3072:D7D+jQF9n5C+O0cOYzia/q94XvyTXMcQP3zmv:D7rzxcRiaC9evKXMcmiv
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__dllonexit
_adjust_fdiv
_initterm
_onexit
toupper
strncpy
strrchr
_purecall
isdigit
strchr
strstr
strncmp
atol
_stricmp
sprintf
malloc
realloc
free
_chsize
_telli64
_lseeki64
??3@YAXPAX@Z
_fstat
_errno
??2@YAPAXI@Z
_strnicmp
_unlink
_strcmpi
_read
_tell
_write
_sopen
_open
_close
_stat
_lseek
_creat
DisableThreadLibraryCalls
InterlockedDecrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
GetLastError
GetSystemInfo
InterlockedIncrement
UnmapViewOfFile
CharNextA
GetSystemMetrics
CanUnload
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE