CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
c264fc375983521fe4b48220712413f2bf1cf5255f150a53628e84b7896d972e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c264fc375983521fe4b48220712413f2bf1cf5255f150a53628e84b7896d972e.dll
Resource
win10v2004-20220812-en
Target
c264fc375983521fe4b48220712413f2bf1cf5255f150a53628e84b7896d972e
Size
100KB
MD5
9303d1ee3c3c3cd66172c3b028a1e2f9
SHA1
4331f960bffc2cad9bc720cbc614f07da20900e8
SHA256
c264fc375983521fe4b48220712413f2bf1cf5255f150a53628e84b7896d972e
SHA512
6b9a88892fdc45f299f4de7ff9df1398164d7939c248dc87187c713814c0a0cf9b4ba1b2dab36628934f50e902539f94357b8869184922c13e5b969c7c48d93a
SSDEEP
1536:Eh1T6DE3TEYkJUpltGeVnnSkfsJFVgXvQgJgHeER1NNvZRtlBT:EfEYkJanSkfUY8nP5l
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
??2@YAPAXI@Z
wcscmp
fclose
strcpy
sprintf
memset
ftell
fseek
_vsnprintf
tolower
_except_handler3
memcpy
malloc
exit
strrchr
wcsstr
wcscpy
wcsncat
strstr
time
srand
rand
strcat
wcslen
strcmp
strncpy
free
_stricmp
strlen
mbstowcs
??3@YAXPAX@Z
fopen
_strupr
_strcmpi
CreateDCA
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
MultiByteToWideChar
GetModuleHandleA
GetProcessHeap
HeapAlloc
SetFilePointer
CloseHandle
GetFileSize
ReadFile
WideCharToMultiByte
GetFileAttributesW
GetTempPathA
DeleteFileA
GetModuleFileNameA
GetPrivateProfileStringA
Sleep
OpenProcess
TerminateProcess
GetCurrentProcess
LoadLibraryA
FreeLibrary
lstrlenA
wsprintfA
GetWindow
GetClassNameW
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetDC
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE