EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
6a9a6ac00547d790a8922f4a5e044e7c2b396763e1792853cba800ca5a05093c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6a9a6ac00547d790a8922f4a5e044e7c2b396763e1792853cba800ca5a05093c.dll
Resource
win10v2004-20220812-en
Target
6a9a6ac00547d790a8922f4a5e044e7c2b396763e1792853cba800ca5a05093c
Size
20KB
MD5
0462e65ef4ce81a3f402c32b139f99b7
SHA1
848929be8530ba54fce5a1f1302597b5167d0c86
SHA256
6a9a6ac00547d790a8922f4a5e044e7c2b396763e1792853cba800ca5a05093c
SHA512
82cce30eca99191475889da95d7e7f3565aa6739471cc9a9294951b28388bbe3057664d56fdd46a366936d418b67c04d597e11d2017062d1d6ff9eacfead7966
SSDEEP
384:GaaF2P3Hg7pTOeIevICMuITfPAbGco7Iq4cUR0YTqR7khECP2D:kC3qwbVTIXpcRYuR4
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE