CanUnload
RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
c184c1d94c29cf32e3622c8a669df2c4b08ac7cade62d073c9733f83bf3b35da.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c184c1d94c29cf32e3622c8a669df2c4b08ac7cade62d073c9733f83bf3b35da.dll
Resource
win10v2004-20220812-en
Target
c184c1d94c29cf32e3622c8a669df2c4b08ac7cade62d073c9733f83bf3b35da
Size
96KB
MD5
11990f92c373acd99577ef43a342c1df
SHA1
cef17831dbdaa439f566c3e6a35e391eacbfcfb3
SHA256
c184c1d94c29cf32e3622c8a669df2c4b08ac7cade62d073c9733f83bf3b35da
SHA512
18c3e5bfaffb5967f7190facc5c24501ae98c765b35ef72c928640a2c32fa89f1f4edd96fc71cf16d093a81ee95d9347811befa6deb08260cc4f4fb44e71e951
SSDEEP
1536:tLahPzHET27flwJLDtTEG7qjV5ySy51FXQyxFQe9Uw+p7LOdYi:tiDEowUrjVPA1JxX5R
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_initterm
??2@YAPAXI@Z
_adjust_fdiv
strncmp
strncpy
strtok
atoi
??3@YAXPAX@Z
_purecall
malloc
free
strchr
strrchr
RegQueryInfoKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
MulDiv
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualAlloc
VirtualFree
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
CanUnload
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE