CanUnload
RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
0c6bd293d4186f3b3ce0d14334e2c385de2bcc7ad5fd78d29dc3834d9e90e821.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0c6bd293d4186f3b3ce0d14334e2c385de2bcc7ad5fd78d29dc3834d9e90e821.dll
Resource
win10v2004-20221111-en
Target
0c6bd293d4186f3b3ce0d14334e2c385de2bcc7ad5fd78d29dc3834d9e90e821
Size
245KB
MD5
352b99b8f77175a85eba4e50bf52cf9c
SHA1
a09c0b62a44ed602fb3990d2bb6afb8b5024326c
SHA256
0c6bd293d4186f3b3ce0d14334e2c385de2bcc7ad5fd78d29dc3834d9e90e821
SHA512
9bf5bac2e2ccc97520ffcf06b20d344e1bf17fa9082c78a37e637b2ab8a23844a4fc3fc381e65bd6633e185ce02851d2c86b9d9d97a9dd52d327e635d9631ae8
SSDEEP
6144:0Jnw6qcTM4BrfClr5+VGkDtG2bi4fhLxfzmxQB0dN1:MTMICt+VvDE2bi4fhLxS1
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InterlockedDecrement
InterlockedIncrement
GetCursor
LoadCursorA
SetCursor
calloc
memcpy
_CIpow
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
strstr
fprintf
_setjmp3
longjmp
sprintf
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
_iob
fread
CanUnload
RMACreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE