RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
c0e1bdc28c6d199d8c14dbec648022a9b948a7cf72f19a2c5bf9947ca3627e88.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0e1bdc28c6d199d8c14dbec648022a9b948a7cf72f19a2c5bf9947ca3627e88.dll
Resource
win10v2004-20221111-en
Target
c0e1bdc28c6d199d8c14dbec648022a9b948a7cf72f19a2c5bf9947ca3627e88
Size
148KB
MD5
fa97c7b70c99ee620387411c6fc81c59
SHA1
b9ce7207576415fe165822ce8279da2cc2121423
SHA256
c0e1bdc28c6d199d8c14dbec648022a9b948a7cf72f19a2c5bf9947ca3627e88
SHA512
8c01a7590ba27e761201ec856b1eb01878e5c6da9cc1b5709a0fc79d17e7ff5f5855ef12c48870bd65198bd84f0cac8ddfc8df8da6eb3ba478e885e80236b1a1
SSDEEP
3072:17jY1OTeijHd2S1VbLISDmv1cPLKs2WkaEOV:21ajZPpDmv1cjKsDJE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
_onexit
_initterm
_adjust_fdiv
malloc
realloc
free
_stricmp
__dllonexit
_putenv
strstr
??2@YAPAXI@Z
strrchr
printf
rand
_purecall
??3@YAXPAX@Z
strchr
DisableThreadLibraryCalls
MultiByteToWideChar
SetErrorMode
FreeLibrary
LoadLibraryA
GetCurrentProcessId
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
InterlockedIncrement
MessageBoxA
GetWindowThreadProcessId
FindWindowExA
ClientToScreen
GetWindowRect
GetLastActivePopup
GetActiveWindow
GetSystemMetrics
CharNextA
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE