EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
48358da34cadd1486d2dd37aa03a5f59ca48f3c301f0684455887f430ba826b5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48358da34cadd1486d2dd37aa03a5f59ca48f3c301f0684455887f430ba826b5.dll
Resource
win10v2004-20220901-en
Target
48358da34cadd1486d2dd37aa03a5f59ca48f3c301f0684455887f430ba826b5
Size
31KB
MD5
784e1ef431faf4de5e708702fbf3b1b0
SHA1
e06574a93a18f0d2bae573f876ed30349d4294b2
SHA256
48358da34cadd1486d2dd37aa03a5f59ca48f3c301f0684455887f430ba826b5
SHA512
e2c423f5eb428890c4e82e4ed0b88954c6cbc91fd40bb2fd138a6cf4e606c763efadf2c9f571307322a70016be765592b621085735c90d0376309595ec0d1790
SSDEEP
384:1vxqOy95DS8FSaUuCQbnW3S7Gpo7I6kn6TGbJrHqlg/RMZBmyXeBFvYnjOBxfK:1vByXGWSh3H3b/6ql4gZAmO6rBxf
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE