RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
7cfe20cde4bea2a699423da978bdf8a3011df6e7a1750ca6636245f48953fa98.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7cfe20cde4bea2a699423da978bdf8a3011df6e7a1750ca6636245f48953fa98.dll
Resource
win10v2004-20220812-en
Target
7cfe20cde4bea2a699423da978bdf8a3011df6e7a1750ca6636245f48953fa98
Size
104KB
MD5
78aaf7333ab0098662b0f32756d46cc8
SHA1
b886e429a304418f4c7c43597bfe43d2defa0be0
SHA256
7cfe20cde4bea2a699423da978bdf8a3011df6e7a1750ca6636245f48953fa98
SHA512
b1eb9714bc22333335ac5f514b35cf0bca9e1f18e2946ce0a6919cabfdc56cf8c1ef8f6fcb54dc8c8fb905e41d0d4b4b60b73da7b5a5c4796bc4f2f1cbe32fd5
SSDEEP
1536:BZ3IJen28rEiKdNl399vNfQ6tKNlMa7SOFikUdlcz3Gw:BVImeXjz2+MM4SOFikUd9
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
free
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_onexit
realloc
malloc
strncpy
_strnicmp
_ftol
iscntrl
isspace
??2@YAPAXI@Z
strstr
_purecall
__dllonexit
_strcmpi
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE