CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
9df9df412b273b4cebcb11a80c84881c94273de269619cc04e374875ecb4195e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9df9df412b273b4cebcb11a80c84881c94273de269619cc04e374875ecb4195e.dll
Resource
win10v2004-20221111-en
Target
9df9df412b273b4cebcb11a80c84881c94273de269619cc04e374875ecb4195e
Size
66KB
MD5
eddb7463492dbafc7f70b5a68dddc927
SHA1
ae9a8a3558da82a0b5666ed5a0726e9a3e53ccf2
SHA256
9df9df412b273b4cebcb11a80c84881c94273de269619cc04e374875ecb4195e
SHA512
5592cd32941a1b5c36614afc2fde02bf12470996d7d8fbebb8ff68bb18b7ddb2675dc75777c1f7518a00f64310dcaf05a31b17dd0fb700d9130b22bb30a4ae41
SSDEEP
1536:+fQAl+7ovON/4VUWQbxUIp6Enf+6UxYshGCOhB8QlyLdDRsj9:aQAl+p+ijGIp1o3oPhtly51E
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE