EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
18d204aa5f1e0ef7a1694b54cb261fa5dbb43b3a737f6f8194418a53880f1bc9.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
18d204aa5f1e0ef7a1694b54cb261fa5dbb43b3a737f6f8194418a53880f1bc9.dll
Resource
win10v2004-20220812-en
Target
18d204aa5f1e0ef7a1694b54cb261fa5dbb43b3a737f6f8194418a53880f1bc9
Size
23KB
MD5
56c61c07f3338714f095805106f664ce
SHA1
1da440b9b8c485af4c3dcdd48525c1fba1ae4469
SHA256
18d204aa5f1e0ef7a1694b54cb261fa5dbb43b3a737f6f8194418a53880f1bc9
SHA512
6469111d77346a3e22e7459b34615f8fdbc32f136022cadb5a8b05dac4713a304b0cc24129e2b55779b7c52f9613fdaae66e93d3534f783079d49e3e3c42672f
SSDEEP
384:e73+Hwzj2TPptM3X2PyJ34I9KBjKX0m5xYReopSV68VfyToCQR9QZoF1tNmqGqh:e7uQuTP3M3X2PyJII94j92SUopSvVfyW
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
CloseDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE