CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
5609d9e91a10d315e0bbfbeaa97715296114357964712c3ab0f4fb10006217a5.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5609d9e91a10d315e0bbfbeaa97715296114357964712c3ab0f4fb10006217a5.dll
Resource
win10v2004-20220812-en
Target
5609d9e91a10d315e0bbfbeaa97715296114357964712c3ab0f4fb10006217a5
Size
54KB
MD5
318c191150caff530f0fa0138e8526d0
SHA1
2a60886eb644c2ba955001281a71a0743844a49b
SHA256
5609d9e91a10d315e0bbfbeaa97715296114357964712c3ab0f4fb10006217a5
SHA512
a0d6fb4ff8904c8d27cfd96232393845d18880140c7b83bdb7aef64d224e9a97d91d011147e77f6177f2b95b338cb5565dff7fe63d803fbeb1a32396194fc238
SSDEEP
1536:BfQAl+7ovOXKn+qR7pkBzuV89G39OAd7OGtKcp:dQAl+pE+qR219G39OQ7OsKcp
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE