RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
c9de8c776c8ebd5c5f17be69d64db10de850824e1eb183805194129f3f3b7016.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9de8c776c8ebd5c5f17be69d64db10de850824e1eb183805194129f3f3b7016.dll
Resource
win10v2004-20220812-en
Target
c9de8c776c8ebd5c5f17be69d64db10de850824e1eb183805194129f3f3b7016
Size
148KB
MD5
3644d871b5bdb136e6493b80479898b6
SHA1
43f589135b60575553ed58cd00cea183ef440005
SHA256
c9de8c776c8ebd5c5f17be69d64db10de850824e1eb183805194129f3f3b7016
SHA512
4fa0c8c47af38a9d0fce38515af23aaab7ef13f86c47c6a5f1c2968941dec98d27fe1fa9e9d8a55d5be1727bab965914616f12b8bf663c8fe0186f23ff34b878
SSDEEP
1536:17iUjX9Y1OTei/7H+y0aSSZrugrmeQM+TSrIEwIDH+9/k/4hPY1CzTvqR+VUXyqu:17jY1OTeijHd2S1VbLIhT/LqR+VivW
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
_onexit
_initterm
_adjust_fdiv
malloc
realloc
free
_stricmp
__dllonexit
_putenv
strstr
??2@YAPAXI@Z
strrchr
printf
rand
_purecall
??3@YAXPAX@Z
strchr
DisableThreadLibraryCalls
MultiByteToWideChar
SetErrorMode
FreeLibrary
LoadLibraryA
GetCurrentProcessId
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
InterlockedIncrement
MessageBoxA
GetWindowThreadProcessId
FindWindowExA
ClientToScreen
GetWindowRect
GetLastActivePopup
GetActiveWindow
GetSystemMetrics
CharNextA
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE