AntiHook
GetKernelExportRVA
Static task
static1
Behavioral task
behavioral1
Sample
82730dd766494eb08b3aad5f28a4574c9a2602a86641541e295212d39534102f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
82730dd766494eb08b3aad5f28a4574c9a2602a86641541e295212d39534102f.dll
Resource
win10v2004-20220901-en
Target
82730dd766494eb08b3aad5f28a4574c9a2602a86641541e295212d39534102f
Size
81KB
MD5
81771d8848b8ee07a2c876db81fe1aa4
SHA1
554a73f090c68f422a93ab576d87bfc6c75f461f
SHA256
82730dd766494eb08b3aad5f28a4574c9a2602a86641541e295212d39534102f
SHA512
cc43a7ad6ff6bfb605bbc532b45049a27b1a5b63bf1edaa490fb4b3e0bd0c9c854954a13a20ce644113837ed552f91818f44de0ac91c4e0da647c2cb58f52bbd
SSDEEP
1536:qbjRAa809wy2V41ip7awb9NKnAf+/ErwuzaqV:qbjKa8SZs4op7a6B+/Er3V
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AntiHook
GetKernelExportRVA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE