HedLabor
SuccessTold
Static task
static1
Behavioral task
behavioral1
Sample
4182713159c24a10857586e2fa23de64f0d9df284f4f68026f467218e915ab06.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4182713159c24a10857586e2fa23de64f0d9df284f4f68026f467218e915ab06.dll
Resource
win10v2004-20220812-en
Target
4182713159c24a10857586e2fa23de64f0d9df284f4f68026f467218e915ab06
Size
91KB
MD5
59851b1232105fa4b2e8d6042ee2098a
SHA1
c6621a956bd9512842703474696f684c91bdaa80
SHA256
4182713159c24a10857586e2fa23de64f0d9df284f4f68026f467218e915ab06
SHA512
507651d374628729f925bb68d25c19fb9ca44dcfa1302ae6760bcca1a44e49bab96768a19b6212ee2314f476bc81682eee2d9769713574833a3ddf7cb3fc7c3c
SSDEEP
1536:dr91rGyEcA0XUj6tvEplxxqQrrYabPDroKKt6jVkTxeJkox3nNF+n6hi94Wu:TU0U6BEpzxJRHFfjV0xSk43WTq
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetProcAddress
LoadLibraryA
CreateEventW
CreateEventA
lstrlenA
lstrcpyA
GetModuleHandleA
VirtualProtect
HedLabor
SuccessTold
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ