__KeRemoveQueue@4
__KeRemoveQueueEx@0
__KeRundownQueue@4
Static task
static1
Behavioral task
behavioral1
Sample
7d135a85b9701d86412f12e46a86851881487a91373c6ffdb5eb57855d1ff48e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d135a85b9701d86412f12e46a86851881487a91373c6ffdb5eb57855d1ff48e.dll
Resource
win10v2004-20220812-en
Target
7d135a85b9701d86412f12e46a86851881487a91373c6ffdb5eb57855d1ff48e
Size
42KB
MD5
9063c6b7858d9ee8d615bffb661df727
SHA1
6fb5ed850c92154ed9056948f621d5f0a95dbc3e
SHA256
7d135a85b9701d86412f12e46a86851881487a91373c6ffdb5eb57855d1ff48e
SHA512
81347aa08e55e5cf7389e9482ba9f173d56d46e2a0e0550c9b2b28004f7af63b6318d8d84a32c7ac5ab1158ffae954e8ab4f6234c4a783e5f762284742328c8d
SSDEEP
768:N+j+xwc5taWY/O6+rnwrp1UzbltD78hpfeFcMn8zEKZZn7PU2TrBmkv9AhLTf9:N+Pci/mrnwrp1UPltDQhpCcxoUUIrBJk
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SeLockSubjectContext
SeReleaseSubjectContext
SeCaptureSubjectContext
MmIsDriverVerifying
SeUnlockSubjectContext
VerSetConditionMask
IoGetRelatedDeviceObject
RtlUnicodeStringToAnsiString
RtlInsertElementGenericTableFull
RtlInitString
RtlDeleteElementGenericTable
RtlCompareString
_wcslwr
ZwOpenDirectoryObject
ZwSetEvent
_vsnwprintf
RtlFreeAnsiString
RtlCopyString
RtlEqualString
strrchr
KeTickCount
wcsspn
DbgPrintEx
RtlInitializeGenericTable
memset
__KeRemoveQueue@4
__KeRemoveQueueEx@0
__KeRundownQueue@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ