CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
e9e54b258d45bb67dbb7bead7fefe104dd3fb340793fc3aff3870d489f7b5141.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9e54b258d45bb67dbb7bead7fefe104dd3fb340793fc3aff3870d489f7b5141.dll
Resource
win10v2004-20220812-en
Target
e9e54b258d45bb67dbb7bead7fefe104dd3fb340793fc3aff3870d489f7b5141
Size
62KB
MD5
0da65db81481b512400bfb5a09714660
SHA1
410d144ac4ed0c7413f17f643968e416e046ecb2
SHA256
e9e54b258d45bb67dbb7bead7fefe104dd3fb340793fc3aff3870d489f7b5141
SHA512
29733ad216030acbef0f9372d1525e0c6f4fe7ed5d2e6f32970f404fed7d24919f66e7e71153d7cbb9d0d9dc4c7b64c90aa5bf842c06abf1ab393deedee92585
SSDEEP
1536:BfQAl+7ovOhOKm10IZpsPd8HRDZetvbkH8QT9+x+lI8llWuiz:dQAl+phM1gd8HRDMtvbkpFlyr
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE