CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
a7b7579bedcc74c589b5668a280ecad602f210f993fc04c88549a3ec68972dcf.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7b7579bedcc74c589b5668a280ecad602f210f993fc04c88549a3ec68972dcf.dll
Resource
win10v2004-20221111-en
Target
a7b7579bedcc74c589b5668a280ecad602f210f993fc04c88549a3ec68972dcf
Size
57KB
MD5
58e9a15cb702aa0c476642eb2a1222d0
SHA1
ddfbb86cca57c72c776f22ce7911ec4a5a9a370b
SHA256
a7b7579bedcc74c589b5668a280ecad602f210f993fc04c88549a3ec68972dcf
SHA512
be30807e488858f5cddaa68e9ad34f9fefbf40bd0961b86402d0495b7578aadd752543e42cbb8ecb5ea258110d075c59ab09b7c48946a26f8bac7f41b3d9857a
SSDEEP
1536:BfQAl+7ovOwcYCkVkbuxlXnC877vbB0iOw:dQAl+pOuGlXCCjS6
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE