RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
2217950b7e5f6a0e4f6c2b65a56f29b46e04063384a4218519f09b4c686d4cc7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2217950b7e5f6a0e4f6c2b65a56f29b46e04063384a4218519f09b4c686d4cc7.dll
Resource
win10v2004-20221111-en
Target
2217950b7e5f6a0e4f6c2b65a56f29b46e04063384a4218519f09b4c686d4cc7
Size
148KB
MD5
920f8c589e86d945f165f9df677c2890
SHA1
8d776baedb989c38e2f6d8a62f74ab108e8fa530
SHA256
2217950b7e5f6a0e4f6c2b65a56f29b46e04063384a4218519f09b4c686d4cc7
SHA512
e7a8458dcd92558ff42606e014c67c12367b6c69d0515c09439900596dcc9a63f21857f8c298524ca2539258b5d3b52eb7fdf003b424dc0b574939b0d8757b9a
SSDEEP
3072:17jY1OTeijHd2S1VbLIKOwGPsCTL5xKCG:21ajZPxPGPsMvG
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
_onexit
_initterm
_adjust_fdiv
malloc
realloc
free
_stricmp
__dllonexit
_putenv
strstr
??2@YAPAXI@Z
strrchr
printf
rand
_purecall
??3@YAXPAX@Z
strchr
DisableThreadLibraryCalls
MultiByteToWideChar
SetErrorMode
FreeLibrary
LoadLibraryA
GetCurrentProcessId
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
InterlockedIncrement
MessageBoxA
GetWindowThreadProcessId
FindWindowExA
ClientToScreen
GetWindowRect
GetLastActivePopup
GetActiveWindow
GetSystemMetrics
CharNextA
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE