CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
a8c9759651a3a9e816e77d471a68ab53b8044288d20e8c2d1c1a3f0ca6de9866.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8c9759651a3a9e816e77d471a68ab53b8044288d20e8c2d1c1a3f0ca6de9866.dll
Resource
win10v2004-20221111-en
Target
a8c9759651a3a9e816e77d471a68ab53b8044288d20e8c2d1c1a3f0ca6de9866
Size
50KB
MD5
5a4fe8f93510c03664ba1ce39d42490f
SHA1
2e42558e38de6d2f18e15071c2cb93a7bc33f50a
SHA256
a8c9759651a3a9e816e77d471a68ab53b8044288d20e8c2d1c1a3f0ca6de9866
SHA512
cfe0241b3ecc6f44d48b48bd936d043bf394c32408be908085d746a9a7d37b13fd494c3c74412507760425b2de39902ab7684cd6fb80e094fc179f3d11e0f9e4
SSDEEP
1536:BfQAl+7ovOzXnSJIrmSF+jJppbq39JdjkdGn:dQAl+pztrLFObbq3BU4
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE