RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
74ed01ea6432fa57dd5536d64391bd151cceb8409a061e16f20aba87d0a23129.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74ed01ea6432fa57dd5536d64391bd151cceb8409a061e16f20aba87d0a23129.dll
Resource
win10v2004-20221111-en
Target
74ed01ea6432fa57dd5536d64391bd151cceb8409a061e16f20aba87d0a23129
Size
112KB
MD5
31610c2534d1a07ef3fa109445077666
SHA1
59c9e1530e2540ff9ac737b7142363d25de699fd
SHA256
74ed01ea6432fa57dd5536d64391bd151cceb8409a061e16f20aba87d0a23129
SHA512
e05eb3ba5d17066f57294fadd8771a2b1849cae14dc41abd81a8dd9b7d1c90c47d7e9d0a9d12d56439267a3e2a4273db6ac4b3c5af51f8f3769a713e6b84f111
SSDEEP
3072:JRJvBsogmer7D39QuG9K30hc+NO/qm7v:ZvBmmSQuG9K7EOS
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
rand
tolower
strchr
??2@YAPAXI@Z
printf
__dllonexit
_onexit
_initterm
_adjust_fdiv
realloc
free
malloc
_purecall
??3@YAXPAX@Z
strrchr
_putenv
_stricmp
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
CharNextA
GetSystemMetrics
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE