Arz
Chh
Drm
Hkl
Mqd
Static task
static1
Behavioral task
behavioral1
Sample
eae0195b0b328c2ca00b6a05bac2cca883916ef198ff8512eac83dda6dd525b7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eae0195b0b328c2ca00b6a05bac2cca883916ef198ff8512eac83dda6dd525b7.dll
Resource
win10v2004-20220812-en
Target
eae0195b0b328c2ca00b6a05bac2cca883916ef198ff8512eac83dda6dd525b7
Size
287KB
MD5
a34cf7069bf4bcb62140501845c1c199
SHA1
18487f1ec0edd531b66434182963c58257175956
SHA256
eae0195b0b328c2ca00b6a05bac2cca883916ef198ff8512eac83dda6dd525b7
SHA512
9f0814870069c09933a74a2df8c1e9174bd2e78a9d451f54b35fa93abfa5e835e544d1c6c36e544b1c267cfeac6009e3c5893bfe5291e77b9512f7e0c1dbeebe
SSDEEP
6144:B7Ezyo3DbWqjTN2kM+4uOhjB/Dz1e/bcJBJk3KKNP:6ysDbnjTNtM1hlCMqJ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
QueryServiceStatus
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
InitializeSecurityDescriptor
OpenProcessToken
StartServiceA
SetSecurityDescriptorDacl
OpenServiceA
AdjustTokenPrivileges
RevokeDragDrop
ReleaseStgMedium
ProgIDFromCLSID
CreateBindCtx
CoResumeClassObjects
CoDisconnectObject
CoGetMalloc
lstrcmpiA
lstrcatA
VirtualFree
TlsSetValue
TlsFree
SleepEx
SetCurrentDirectoryA
RtlUnwind
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
GetStartupInfoA
GetACP
FlushFileBuffers
EnumResourceNamesA
TlsGetValue
Arz
Chh
Drm
Hkl
Mqd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ