CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
ee620482cd7f1c3bf15d106c4645918acf498f7b16cbe34d8eebb8323c62dded.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee620482cd7f1c3bf15d106c4645918acf498f7b16cbe34d8eebb8323c62dded.dll
Resource
win10v2004-20220812-en
Target
ee620482cd7f1c3bf15d106c4645918acf498f7b16cbe34d8eebb8323c62dded
Size
70KB
MD5
fca11130d66a444628d0ca0d3254e4a4
SHA1
c0ed50db4acab6e0ed65d88d0e65c0705a238572
SHA256
ee620482cd7f1c3bf15d106c4645918acf498f7b16cbe34d8eebb8323c62dded
SHA512
4fb7bec1d950a9527d7a514c7067df884ed59bf800c557046c3f88f81a4ea40e7d91659f580fc408d0c9645e4dba9caf8279dd87f6e9bbd718ddeb3d505c123f
SSDEEP
1536:BfQAl+7ovOHwYKy/Z7AlVV2SSYW3Hfz9EdGH9fAFt:dQAl+pHwry/Z0wHfZEYfAFt
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE