CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
17f88be79e1e84f3afb61f87a9938f1a8327f641088eae849634f1c78c037b8c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
17f88be79e1e84f3afb61f87a9938f1a8327f641088eae849634f1c78c037b8c.dll
Resource
win10v2004-20221111-en
Target
17f88be79e1e84f3afb61f87a9938f1a8327f641088eae849634f1c78c037b8c
Size
66KB
MD5
5b603d978eab60b46ea80b91f9b571e6
SHA1
27a700ee5d92ec9de4813af0806f7d2d71a722b8
SHA256
17f88be79e1e84f3afb61f87a9938f1a8327f641088eae849634f1c78c037b8c
SHA512
50c96c08c9915076cd777df36671985fd602564fd09c6558ebe3423426003f6b772286f3e7b69ae1c041624951a49d698b906261ac7c68ccb34e464f226860a9
SSDEEP
1536:BfQAl+7ovO67BX1LDObuTtrOzUdLx1AZubQYpC+qvefP0QRKwJJx8:dQAl+p67DD1FeubQsy8awJ8
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE