WlLockEvent
WlLogoffEvent
WlLogonEvent
WlPostShellEvent
WlShutdownEvent
WlStartShellEvent
WlStartupEvent
Static task
static1
Behavioral task
behavioral1
Sample
d5f0fe2f0bf55e53cd936dec0dcc399be44ef267e1e84216a3c7b4de6a034bd0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5f0fe2f0bf55e53cd936dec0dcc399be44ef267e1e84216a3c7b4de6a034bd0.dll
Resource
win10v2004-20220812-en
Target
d5f0fe2f0bf55e53cd936dec0dcc399be44ef267e1e84216a3c7b4de6a034bd0
Size
39KB
MD5
65312d5ed1feb31d2325eae8e0571f01
SHA1
5db263d7257366e4a55cff7a7694126fa91824d7
SHA256
d5f0fe2f0bf55e53cd936dec0dcc399be44ef267e1e84216a3c7b4de6a034bd0
SHA512
81d4ca86d16c4649711b9cd82baa214f1337c348e1a18a68f3a977e59f1860dd0fea6ddac1b78d7ba3867b0cc09bb5792d6814f99464b80c9b07c8ddde9a625a
SSDEEP
768:dWjGne5IRxvW6g2/vj+OASM+AuscR4Qy2lGPHwe:rwIRJre+AuscRLe
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
WlLockEvent
WlLogoffEvent
WlLogonEvent
WlPostShellEvent
WlShutdownEvent
WlStartShellEvent
WlStartupEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ