RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
dc88a3b29d4a38bb0a07b97811d58ffcc294156df3810b5aa238780efce772a7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc88a3b29d4a38bb0a07b97811d58ffcc294156df3810b5aa238780efce772a7.dll
Resource
win10v2004-20220901-en
Target
dc88a3b29d4a38bb0a07b97811d58ffcc294156df3810b5aa238780efce772a7
Size
104KB
MD5
9ad663167d122d94a46be893933eecec
SHA1
177782f79619a0269a402222e2745b90fda2bb21
SHA256
dc88a3b29d4a38bb0a07b97811d58ffcc294156df3810b5aa238780efce772a7
SHA512
b76be29921c1f6b42bce748fd5cd0d95523344d798781509f062c7316613a3a73abeee183972ae535f61ffa4e424ae83736288b55d31aaaaa196423ab873d052
SSDEEP
1536:BZ3IJen2ymer7DLIA02QuG9Kw2n0hc+2UKeZOd/MLlEQxAv:BVImnmer7D39QuG9K30hc+NO/qm7v
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
free
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_onexit
realloc
malloc
strncpy
_strnicmp
_ftol
iscntrl
isspace
??2@YAPAXI@Z
strstr
_purecall
__dllonexit
_strcmpi
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE