det_StartHook
det_StopHook
Static task
static1
Behavioral task
behavioral1
Sample
4e48132c1b77b8c9016c73aa47e0e8a02b020fcbaddd4b9da3c4a91988a37f40.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e48132c1b77b8c9016c73aa47e0e8a02b020fcbaddd4b9da3c4a91988a37f40.dll
Resource
win10v2004-20220812-en
Target
4e48132c1b77b8c9016c73aa47e0e8a02b020fcbaddd4b9da3c4a91988a37f40
Size
72KB
MD5
da1edf35fa9bef90354f2780e0cf48cd
SHA1
6d0c887d088968241d84f644e22c7cabc64482fa
SHA256
4e48132c1b77b8c9016c73aa47e0e8a02b020fcbaddd4b9da3c4a91988a37f40
SHA512
06298d94bd859dc9e6eb4ea16472ce1bfc5fd80843811f73cc956f850194d5c3f5d620987b02a1d2c7101ff2f719b0b1f694288b883b370dc326b4c5fcdfa05f
SSDEEP
768:wn5DRB8hjcSX8KNCIw70TK3l247z4R5vg11Nu/llqXQNB7:8RB8hjzX8n0TK3l2S4RUWllqXQNB7
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LocalFree
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetShortPathNameA
WideCharToMultiByte
GetModuleFileNameA
VirtualProtect
GetCurrentProcess
SetLastError
WriteFile
GetOEMCP
GetACP
lstrcmpiA
FlushInstructionCache
GetStringTypeA
InitializeCriticalSection
DeleteCriticalSection
SetUnhandledExceptionFilter
GetStdHandle
InterlockedDecrement
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetCPInfo
VirtualFree
HeapCreate
MultiByteToWideChar
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
LCMapStringA
InterlockedIncrement
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
SetHandleCount
HeapFree
HeapAlloc
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
UrlApplySchemeW
StrStrW
StrNCatW
PathRemoveFileSpecA
PathAppendA
StrDupA
StrStrIW
StrCmpIW
StrCpyW
PathStripPathA
StrDupW
StrCmpNIW
InternetCrackUrlW
CoInternetParseUrl
det_StartHook
det_StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ