CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
dde7a1d96f27ea9e2bb71c68579678706c0f9a97bb4c824a02d52b60508544ad.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dde7a1d96f27ea9e2bb71c68579678706c0f9a97bb4c824a02d52b60508544ad.dll
Resource
win10v2004-20220812-en
Target
dde7a1d96f27ea9e2bb71c68579678706c0f9a97bb4c824a02d52b60508544ad
Size
51KB
MD5
0baa2fd1c0941a10b802c6c73adef9d4
SHA1
6590d936834ad40b29014455ea8dfee864939d5b
SHA256
dde7a1d96f27ea9e2bb71c68579678706c0f9a97bb4c824a02d52b60508544ad
SHA512
187f1dced8ed69c4b530a66665d873e30ea2c8a9a35289ba4be9ff75426ee136cdb9d2c6e4388315235f829e251ba698f03637cdf896dc27f7c9129ef164861d
SSDEEP
1536:BfQAl+7ovOEvZ1lzZgJRWJSdIPdBE8tLAV0eEfeLy1+R:dQAl+pEvZ3zZIKPdBEFVzy+R
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE