DllMain
WLEventStartShell
Static task
static1
Behavioral task
behavioral1
Sample
ba9f952a7a0d91faff7c1deedca0b15953fb829447f34c83f0f718fbd1ef6e4e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba9f952a7a0d91faff7c1deedca0b15953fb829447f34c83f0f718fbd1ef6e4e.dll
Resource
win10v2004-20220812-en
Target
ba9f952a7a0d91faff7c1deedca0b15953fb829447f34c83f0f718fbd1ef6e4e
Size
21KB
MD5
686d3f3e01836afa5c0e52d54ff38290
SHA1
3283b960dd8694a34b1ec49377974fba7d12e903
SHA256
ba9f952a7a0d91faff7c1deedca0b15953fb829447f34c83f0f718fbd1ef6e4e
SHA512
d553f0a7abdb00fc79966b193c3d8d1293ee35f137b0424e6a8caf1a1607c3f566a5cbf0184124bf699798a7493d27cced4af248db751854253c5887298b30a8
SSDEEP
384:lBqYAJzHB0qhLPCBnCGfABVGsfNxu+1wSVDrPn1AHEEjLaK:lBaZCBCSIf7pb1AHuK
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateProcessA
GetEnvironmentVariableA
GetThreadContext
ReadProcessMemory
ResumeThread
SetThreadContext
VirtualAllocEx
WriteProcessMemory
lstrcatA
lstrcpyA
DllMain
WLEventStartShell
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ