?GenerateArgument@@YGFHFF<V
?OnComponentExW@@YGEI<V
?FindDeviceExW@@YGXM<V
?EnumMonitorA@@YGKMPAN<V
?IncrementName@@YGJJPAHE<V
?CrtProjectExW@@YGHD<V
Static task
static1
Behavioral task
behavioral1
Sample
800a5ded831b5f2fca83eef13925beda8a89c4365381f2f2276b40e57663be3e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
800a5ded831b5f2fca83eef13925beda8a89c4365381f2f2276b40e57663be3e.dll
Resource
win10v2004-20220901-en
Target
800a5ded831b5f2fca83eef13925beda8a89c4365381f2f2276b40e57663be3e
Size
51KB
MD5
b80cd3d42ea7dbfce590be5268990a28
SHA1
f64d9b17670f3097d17695b787dd65658eaa0bc7
SHA256
800a5ded831b5f2fca83eef13925beda8a89c4365381f2f2276b40e57663be3e
SHA512
e8050489f3a66b7f45bbef01d22e2097f6da0b41f95bda477872cde2cfd44671ed82e64fc31b64b39c3db2c6a8d5a7b0600cb9d673e81291d69fef23281f6286
SSDEEP
768:969ttwLj9ngPnHVO986/n3SxAk2pcAdido9VeTqUIFyuiKa0vy:8nKLj+PHV8n3SxAbFiKAqUEy+ly
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IoDetachDevice
KeEnterCriticalRegion
ZwReadFile
KeSetBasePriorityThread
PsGetCurrentThread
RtlAnsiCharToUnicodeChar
RtlInitializeSid
ZwFsControlFile
ExAllocatePoolWithQuota
IoInvalidateDeviceRelations
CcUnpinDataForThread
SeAssignSecurity
KeRemoveDeviceQueue
RtlUnicodeStringToAnsiString
ExDeleteResourceLite
RtlCreateSecurityDescriptor
KeRestoreFloatingPointState
IoThreadToProcess
SeTokenIsAdmin
KeTickCount
MmSetAddressRangeModified
IoDeleteController
PsImpersonateClient
IoSetHardErrorOrVerifyDevice
SeAppendPrivileges
KeRundownQueue
IoGetLowerDeviceObject
IoGetDeviceToVerify
CcFastMdlReadWait
RtlWriteRegistryValue
SeSinglePrivilegeCheck
RtlCopyUnicodeString
ExDeleteNPagedLookasideList
ExLocalTimeToSystemTime
RtlLengthSecurityDescriptor
RtlCompareString
KeLeaveCriticalRegion
RtlOemToUnicodeN
RtlSetBits
IoRequestDeviceEject
MmUnmapLockedPages
SeTokenIsRestricted
KeGetCurrentThread
RtlFindUnicodePrefix
FsRtlCheckOplock
ExAcquireFastMutexUnsafe
IoGetTopLevelIrp
PoStartNextPowerIrp
IoCreateFile
?GenerateArgument@@YGFHFF<V
?OnComponentExW@@YGEI<V
?FindDeviceExW@@YGXM<V
?EnumMonitorA@@YGKMPAN<V
?IncrementName@@YGJJPAHE<V
?CrtProjectExW@@YGHD<V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE