CreateProcessNotify
bootgman
Static task
static1
Behavioral task
behavioral1
Sample
6ba6845fb5237f35ea3cfceadfb36806688dd9a988199f217e5661be8d348bad.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ba6845fb5237f35ea3cfceadfb36806688dd9a988199f217e5661be8d348bad.dll
Resource
win10v2004-20220812-en
Target
6ba6845fb5237f35ea3cfceadfb36806688dd9a988199f217e5661be8d348bad
Size
56KB
MD5
6c34f54b1c68965755f93d8ec728aff6
SHA1
7270a5cc1eaefabb38a2a1b8bc342b177919f847
SHA256
6ba6845fb5237f35ea3cfceadfb36806688dd9a988199f217e5661be8d348bad
SHA512
3cf2d2cf86669a804f2ff6d562a1a97e4ece37fecdfe91286263a708beafbcb8e1f4503ed003fd607086ad476e2fb80ab7916fea018b3100202163f7ec5f7053
SSDEEP
1536:eBOOXD1kKH4LvUF+Zfb4xSrYCMJ73ln0inU:eBOOX6c+FNkb7Vn04U
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
SendDlgItemMessageW
GetMessageW
PeekMessageW
CharNextW
BeginPaint
GetPropW
SetWindowPos
UpdateWindow
LoadCursorW
TranslateMessage
GetMonitorInfoW
DeferWindowPos
MapWindowPoints
FrameRect
SetCapture
GetClientRect
MsgWaitForMultipleObjects
wsprintfW
GetLastActivePopup
FindWindowExW
BeginDeferWindowPos
EnableWindow
GetDlgItem
GetDesktopWindow
PostThreadMessageW
InvalidateRect
EndDeferWindowPos
SetCursor
RegisterClassExW
SetWindowLongW
IsWindowEnabled
FillRect
GetWindowThreadProcessId
GetDC
MonitorFromWindow
GetKeyState
ReleaseCapture
ReleaseDC
GetSysColor
GetClassNameW
PostMessageW
VirtualAlloc
GlobalUnlock
WideCharToMultiByte
GetFileSize
GetCurrentDirectoryA
VirtualAlloc
ReadFile
InterlockedDecrement
FindFirstFileA
WriteFile
IsBadReadPtr
MulDiv
GetFileAttributesA
GetCurrentProcessId
FindClose
SetFileAttributesA
lstrcmpiA
ReadProcessMemory
CreateFileA
FindNextFileA
GetPrivateProfileStructA
OpenProcess
ResumeThread
VirtualQueryEx
GlobalAlloc
WritePrivateProfileStructA
GlobalLock
VirtualFree
CreateSemaphoreA
lstrcpyA
GetHandleInformation
LoadLibraryA
SetFilePointer
GetTempPathA
GetProcAddress
GetStartupInfoA
DeleteFileA
DeleteObject
SetBkMode
CreatePen
BitBlt
SetLayout
Ellipse
SetBkColor
CreateSolidBrush
GetObjectW
RealizePalette
CreateHalftonePalette
GetDeviceCaps
SetTextColor
SelectObject
LineTo
SelectPalette
CreateProcessNotify
bootgman
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ