EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
7dda5bb23c155b3c11553002835b35d549dc3e6e7f1698c68620c746ceda99a5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7dda5bb23c155b3c11553002835b35d549dc3e6e7f1698c68620c746ceda99a5.dll
Resource
win10v2004-20220812-en
Target
7dda5bb23c155b3c11553002835b35d549dc3e6e7f1698c68620c746ceda99a5
Size
18KB
MD5
26ea1e93b5342ea337d7fb1752b2e77b
SHA1
5a9c242db4f22bd1bffb98bcf37042265613fb6e
SHA256
7dda5bb23c155b3c11553002835b35d549dc3e6e7f1698c68620c746ceda99a5
SHA512
5eafea464255f08e8e5fe5f0e86e3976913e1fecaa8b1f34edef1613dbbd543d4651944dc391652c2718f6981c267b4f614f92a82038063e2c35c43c5114d932
SSDEEP
384:/2ZX8VBD459HyY2yvMxp3cgHd4aQX3alo7I6kn6TnqN:YszCpv2yUxp3cUd9me/6L
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE