CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
56c93106a3d1d89a3dde5ed290d9ddefc291ae5e5465f556b38cd4787c313dfc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56c93106a3d1d89a3dde5ed290d9ddefc291ae5e5465f556b38cd4787c313dfc.dll
Resource
win10v2004-20220812-en
Target
56c93106a3d1d89a3dde5ed290d9ddefc291ae5e5465f556b38cd4787c313dfc
Size
64KB
MD5
0e1c2cce7645d508cc9d63c5dc6e6364
SHA1
cd5b66d4d4c913afe7913ef657ca50ae2782f5c6
SHA256
56c93106a3d1d89a3dde5ed290d9ddefc291ae5e5465f556b38cd4787c313dfc
SHA512
a6714cf15122ba69afe977952ac7cf414b4e3e34081de3b9ead3a6ad2344ec58d7563ee9f6d9cf9225f8ce486663e846c59cb229e75f7e68eea27b8a86aeaf54
SSDEEP
1536:BfQAl+7ovO+S+TTXUpltggia02Aq8Aa5M3WfUqs/t73U0JX:dQAl+pJ+TTXqlaRa02p8AaCWQ/DX
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE