CTQlAydBHJtGdeCOivQzmS
LdrkUJDyVYwMADaZkDtMuO
UsoEmVyRHXYBuYQaQKVYMR
ViIZRxEOIXIhBsqreOiKtF
tQbomslxkxkdUsjMGMpLUL
Static task
static1
Behavioral task
behavioral1
Sample
service.dll
Resource
win10v2004-20220812-en
Target
service.dll
Size
368KB
MD5
0df6a0de449cbc0f3331b33fbfc5b7c0
SHA1
3e41ade403f19ed56773bf8c1a365bd02adae0d1
SHA256
49f22332c61975e05449bd2eb9b800e213bc0808ef4c2d26e0af3bdd3f7fc396
SHA512
80ca7b46d3ee300a600790be88d7476861b4ba0b9f1da5e6529df4005aed89246ec05d31e40b89e41d17c7880e36f8c2d82fa5e47186abb36c1abf04e6001737
SSDEEP
6144:a12q2cyh8EIgzRXT0NJAc6ngRXNmmPepXnY/B7SYl5Yk61L63AbMmwH7gb6YrtZb:a12qFgNT0NKtgRXNzwXCzHQObgWYrHKM
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetProcessDynamicEnforcedCetCompatibleRanges
QueryThreadpoolStackInformation
QueryInformationJobObject
CloseThreadpool
NotifyUILanguageChange
CompareFileTime
GetFileSizeEx
InitOnceExecuteOnce
GetProcessShutdownParameters
BeginUpdateResourceA
SetHandleInformation
WritePrivateProfileStringW
SetEventWhenCallbackReturns
SetProcessAffinityUpdateMode
ReplaceFileA
EraseTape
SetHandleCount
TlsSetValue
GetSystemDefaultLCID
VirtualProtect
IsWow64GuestMachineSupported
RtlCaptureContext
VirtualFree
SetConsoleTitleA
GetSystemTimeAdjustment
GetHandleInformation
GetFullPathNameW
SetConsoleScreenBufferSize
EnumCalendarInfoW
ReleaseSemaphore
GetThreadIdealProcessorEx
lstrcpynW
DeleteTimerQueue
OutputDebugStringA
RtlPcToFileHeader
VirtualAlloc
GetNumberOfConsoleMouseButtons
GetFinalPathNameByHandleW
HeapLock
LoadLibraryExA
WakeConditionVariable
CreateThreadpoolIo
IsEnclaveTypeSupported
GetConsoleHistoryInfo
SetLocaleInfoA
FreeMemoryJobObject
GetUserDefaultLocaleName
IsNormalizedString
CheckTokenCapability
InitializeCriticalSection
ExpandEnvironmentStringsA
LeaveCriticalSectionWhenCallbackReturns
SetFilePointer
TryAcquireSRWLockShared
GetNumaAvailableMemoryNode
GetFullPathNameA
GetCompressedFileSizeW
GetSystemPowerStatus
WaitForThreadpoolIoCallbacks
EnumResourceNamesW
CreateJobSet
GetDllDirectoryA
GetLargePageMinimum
FindResourceA
CreateHardLinkW
lstrlenA
GetEnvironmentVariableA
ResetWriteWatch
GetLocaleInfoW
WaitForSingleObject
GetCurrentThreadId
DebugActiveProcessStop
FindNextVolumeMountPointA
ReleaseMutex
FreeEnvironmentStringsW
SetEnvironmentStringsA
lstrcatA
GetStringScripts
GetVolumePathNamesForVolumeNameA
PrepareTape
GetSystemDefaultLocaleName
DisconnectNamedPipe
EnumResourceLanguagesExA
SetFirmwareEnvironmentVariableExA
FindActCtxSectionStringA
GetCommandLineA
GetLogicalDriveStringsW
SetFileAttributesTransactedW
GetProfileSectionA
GetExitCodeThread
Sleep
GetFileInformationByHandle
LCMapStringEx
CopyFileA
GetCurrencyFormatEx
CreateFileTransactedW
FatalAppExitA
EscapeCommFunction
SetVolumeMountPointA
AddResourceAttributeAce
CancelIo
GetStringTypeExA
CreatePseudoConsole
RaiseFailFastException
CreateFileA
VerLanguageNameA
GetUserDefaultLCID
SetEvent
CloseThreadpoolTimer
VerLanguageNameW
GetSystemFileCacheSize
GetMailslotInfo
SetDllDirectoryA
LoadLibraryA
lstrcatW
GetCurrentThreadStackLimits
FindResourceExA
LockResource
GetFullPathNameTransactedW
TransmitCommChar
IsUserCetAvailableInEnvironment
CloseHandle
GetSystemInfo
SetThreadpoolWait
CreateThreadpoolTimer
CreateThread
ResetEvent
IsDBCSLeadByte
ResizePseudoConsole
FindResourceW
HeapAlloc
FileTimeToLocalFileTime
GetAtomNameA
LocateXStateFeature
FillConsoleOutputAttribute
GetCurrentConsoleFontEx
AddSIDToBoundaryDescriptor
GlobalAddAtomExW
QueryIdleProcessorCycleTimeEx
LocalSize
GetThreadContext
ReadDirectoryChangesW
CreateFileMappingFromApp
DeleteFileTransactedW
GetSystemCpuSetInformation
GetProcAddress
UnregisterApplicationRestart
VirtualAllocEx
HeapQueryInformation
GetOverlappedResultEx
SetIoRateControlInformationJobObject
LockFileEx
SetThreadStackGuarantee
IsProcessorFeaturePresent
CreateMemoryResourceNotification
DeleteCriticalSection
lstrcpynA
FindVolumeClose
DisableThreadProfiling
GetPrivateProfileStructA
SetConsoleCP
EnumSystemLocalesW
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
SetThreadpoolStackInformation
OpenJobObjectA
GetProcessInformation
lstrcmpiA
GlobalWire
LocaleNameToLCID
WritePrivateProfileSectionW
FreeUserPhysicalPages
CancelTimerQueueTimer
GetFileType
DeleteTimerQueueTimer
GetSystemTime
CopyFileExW
GetThreadSelectedCpuSets
GetTapeStatus
DosDateTimeToFileTime
GetNumaNodeProcessorMaskEx
lstrcmpiW
GetUserDefaultGeoName
GetVolumePathNameA
OpenMutexW
GlobalUnlock
FlsFree
GetCurrencyFormatA
ConvertThreadToFiber
QueryProcessAffinityUpdateMode
MoveFileW
GetProfileStringA
GetConsoleAliasExesLengthA
RequestDeviceWakeup
WritePrivateProfileSectionA
CreateFiber
GetDriveTypeW
OpenThread
FlushFileBuffers
GetExitCodeProcess
RegisterApplicationRecoveryCallback
OpenPrivateNamespaceA
GetDiskSpaceInformationA
AddVectoredContinueHandler
EnumResourceLanguagesA
ReadFile
GetCPInfoExW
GetStartupInfoW
GetPrivateProfileStructW
EncodeSystemPointer
GetNumaHighestNodeNumber
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegUnLoadKeyW
RegGetValueW
RegEnumValueW
RegQueryValueExW
RegGetKeySecurity
CTQlAydBHJtGdeCOivQzmS
LdrkUJDyVYwMADaZkDtMuO
UsoEmVyRHXYBuYQaQKVYMR
ViIZRxEOIXIhBsqreOiKtF
tQbomslxkxkdUsjMGMpLUL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ