__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
Static task
static1
Behavioral task
behavioral1
Sample
1c0e5ffae41532d03ead6c05aca1792c1a9de488936f8a13ce1eac600f6e2e1e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1c0e5ffae41532d03ead6c05aca1792c1a9de488936f8a13ce1eac600f6e2e1e.dll
Resource
win10v2004-20220812-en
Target
1c0e5ffae41532d03ead6c05aca1792c1a9de488936f8a13ce1eac600f6e2e1e
Size
29KB
MD5
a0c329f636a8574102524bbc3115d344
SHA1
b52428d590c46160ca6b3649c03432fbbac7c5a1
SHA256
1c0e5ffae41532d03ead6c05aca1792c1a9de488936f8a13ce1eac600f6e2e1e
SHA512
67c5f538d440e9f61b664a66941a0cc782d09a338c3c4308ec09c8fac0baa5cd1c22f5e2b1bcb3e92d9f112c55325334a48388b5c6934455f3478dd7289e6427
SSDEEP
384:Ooiw8XtFe103G+LnA249QE6TuXLHHocbbjb41gt2c6ghOww4WdjTfNW/:pGt9c3Q8XLHXbbHUfwyfTfy
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExFreePoolWithTag
RtlIntegerToUnicodeString
RtlCheckRegistryKey
_strupr
__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ