HedLabor
SuccessTold
Static task
static1
Behavioral task
behavioral1
Sample
0676dfceb682164e16055cfa20012f81f3c86e80c95042576060f7a4fbd403af.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0676dfceb682164e16055cfa20012f81f3c86e80c95042576060f7a4fbd403af.dll
Resource
win10v2004-20220812-en
Target
0676dfceb682164e16055cfa20012f81f3c86e80c95042576060f7a4fbd403af
Size
91KB
MD5
f0b65b657725a1b5766730ae5c2421ac
SHA1
78a0676d79b06ba2ea8d25e6fe1257267efa01f0
SHA256
0676dfceb682164e16055cfa20012f81f3c86e80c95042576060f7a4fbd403af
SHA512
36b5c3cbcdd92ed27289716b2d329f91d9eca4bd418470f36aca78c4f4cc3028a31829cbff0e73833d25a78d473d076495ee43f2ea5ac319795957799db69ad3
SSDEEP
1536:rr91rGyEcA0XUj6tvEplxxqQrrYabPDroKKt6jVkTxeJkox3nNF+n6hi94Wu:NU0U6BEpzxJRHFfjV0xSk43WTq
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetProcAddress
LoadLibraryA
CreateEventW
CreateEventA
lstrlenA
lstrcpyA
GetModuleHandleA
VirtualProtect
HedLabor
SuccessTold
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ