RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
2fbd5b521aaf3383b727bac6faf73498cc3aac5651ef334065afeb2fe569e561.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2fbd5b521aaf3383b727bac6faf73498cc3aac5651ef334065afeb2fe569e561.dll
Resource
win10v2004-20220812-en
Target
2fbd5b521aaf3383b727bac6faf73498cc3aac5651ef334065afeb2fe569e561
Size
140KB
MD5
6ac9310ac49529dd5bebfc2c069bbff7
SHA1
29f1f1c241b6dd2ee5f02f5b7652783f3d87d30a
SHA256
2fbd5b521aaf3383b727bac6faf73498cc3aac5651ef334065afeb2fe569e561
SHA512
584e199a19ef42e55515efd82cc3dd3b067a3083dca4489b367605be9677a0279349cffe9c24014a2f568cc02e4ced6858cc417bd9476b1bbb78761bc9f355b9
SSDEEP
3072:8AM9hAIfWslWpBNwZnipvs4LahI4Gn3UqjVf:8AMvrINwZnipvu03UqjV
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
isspace
strncpy
strchr
sprintf
free
_initterm
malloc
_adjust_fdiv
__dllonexit
??2@YAPAXI@Z
_purecall
_strnicmp
??3@YAXPAX@Z
_onexit
_strcmpi
GetProcAddress
LoadLibraryA
VirtualAlloc
InterlockedDecrement
Sleep
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ