CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
da94ae17a80ab1d9310854e7b5e920d90784881ddd843c303ef29eaa1bf44d40.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da94ae17a80ab1d9310854e7b5e920d90784881ddd843c303ef29eaa1bf44d40.dll
Resource
win10v2004-20220812-en
Target
da94ae17a80ab1d9310854e7b5e920d90784881ddd843c303ef29eaa1bf44d40
Size
67KB
MD5
2c2102d26890d47c02e2b438c4d83731
SHA1
8e9d0040d4200f50b75dfa72756708e467926f79
SHA256
da94ae17a80ab1d9310854e7b5e920d90784881ddd843c303ef29eaa1bf44d40
SHA512
841b642060da75d1b43d37b2b8f81a1408e6c7f3ab2cbae933e7f1a33aa931f4f0992b7f3aa580d5e6261723cd7f7641d83ad9da1a34070d57a2ed2c5d66edac
SSDEEP
1536:BfQAl+7ovOqoCkXzpar4PaCekLnIDLJEd2E2CfUY7YvSM/:dQAl+pnc4PaCekCA2Efg
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE