CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
fba898a38860a7f49802bda84550d4766bb174344bab0c1d9df2ed850320bdbd.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fba898a38860a7f49802bda84550d4766bb174344bab0c1d9df2ed850320bdbd.dll
Resource
win10v2004-20220812-en
Target
fba898a38860a7f49802bda84550d4766bb174344bab0c1d9df2ed850320bdbd
Size
49KB
MD5
1d5575eeeff663e3aeecb8c8ac224190
SHA1
07141b97d68e4a514705cbccc7cbb0d0b50d511b
SHA256
fba898a38860a7f49802bda84550d4766bb174344bab0c1d9df2ed850320bdbd
SHA512
316b5d5d11eddfcd538f3372ff15a8336a546cfe1c947cc0eb855973f827b8d90d659f7fec747730c9694960250c558ae6105036545d0bc3e64300cd26527ef2
SSDEEP
768:XxjDQp6DsOfL62l8ovObUK4N+gkqFcAM8/X8ljtFcpgqjr2WIzZTUo2Ny:BfQAl+7ovObUK4N+g3yq//7OWcJH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE