CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0ec6e33d7aec0298ae5f49e3143147399af0641d75c3ef469eebaab66ce98f9b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0ec6e33d7aec0298ae5f49e3143147399af0641d75c3ef469eebaab66ce98f9b.dll
Resource
win10v2004-20220901-en
Target
0ec6e33d7aec0298ae5f49e3143147399af0641d75c3ef469eebaab66ce98f9b
Size
58KB
MD5
5a565ba9e985d8d3b5f33a87b567eda4
SHA1
1120502bf053774b63dab5c29c388acc7710a378
SHA256
0ec6e33d7aec0298ae5f49e3143147399af0641d75c3ef469eebaab66ce98f9b
SHA512
4c00f52afcc9344b507c0cc54f06dc12c5ad3b9115c1f414954b226175e7b8c7f00232eacbe6604f8f983744665e6b120956b66deee108245c00c2c94f48a025
SSDEEP
1536:BfQAl+7ovOcWxwLL/281VqSs+NG64SIcsoJNnNf3KZV:dQAl+pdaPs+NGoIcpJNnNyZV
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE