CanUnload
RMACreateInstance
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
41f85e6e5dba31dc8fe83854e482557142a6553bc4470aa78050af6ab4232efb.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
41f85e6e5dba31dc8fe83854e482557142a6553bc4470aa78050af6ab4232efb.dll
Resource
win10v2004-20220901-en
Target
41f85e6e5dba31dc8fe83854e482557142a6553bc4470aa78050af6ab4232efb
Size
172KB
MD5
202b4740e93ddd22f2228d75c6ac1fd7
SHA1
a7133f57fbf7b01976b98f7fb8e90d1e5970a387
SHA256
41f85e6e5dba31dc8fe83854e482557142a6553bc4470aa78050af6ab4232efb
SHA512
cb40d8a7d2f5735d1aed8dfb55bb35c9c745501f7b58eea023f002f4aad8943aaf7e8875eaa824fd16601d5c321ee81966d32f7c132607c2627c0b0bd393e12d
SSDEEP
3072:yy7QmXDaYGdK8rz9YXw/JtEAHG7sUcMCtvmP+6Haz0xuxHdV4M9:yyJGYQz9H/JtVHdUcMCtmWzO8V4q
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
tolower
isupper
strncpy
_stricmp
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
_purecall
_onexit
_initterm
_adjust_fdiv
__dllonexit
_putenv
_ftol
realloc
DisableThreadLibraryCalls
CanUnload
RMACreateInstance
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE