__bn_rfregdrv@0
__bn_urfregdrv@0
Static task
static1
Behavioral task
behavioral1
Sample
296e13d917d7920bc6fdc79224ea1c53109bb3952468b845b3eb1cb70e44c292.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
296e13d917d7920bc6fdc79224ea1c53109bb3952468b845b3eb1cb70e44c292.dll
Resource
win10v2004-20220901-en
Target
296e13d917d7920bc6fdc79224ea1c53109bb3952468b845b3eb1cb70e44c292
Size
648KB
MD5
aa24ef8056f5f1193b91205698efbde8
SHA1
6d3118e3ba42f8d8453313b44e509a1a637f56df
SHA256
296e13d917d7920bc6fdc79224ea1c53109bb3952468b845b3eb1cb70e44c292
SHA512
cf3ef1341f5e34c2ec6dba85813a647d4078fd76692855ac6f93328b02e0aad91232662e125137d718c62858a1cfc1038b2111dbc8bed8df3d7a47bffd2adc69
SSDEEP
12288:eBTuA+wrx881XEnBXbHV8H9KIPoouAkEwrxg:eBTu2xbqB2Hv7u3x
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr
CloseHandle
WriteFile
Wow64RevertWow64FsRedirection
GetModuleFileNameA
GetEnvironmentVariableA
WaitForSingleObject
CreateProcessA
GetStartupInfoA
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
Wow64DisableWow64FsRedirection
IsWow64Process
CreateFileA
GetVersionExA
atoi
??3@YAXPAX@Z
strchr
strrchr
??2@YAPAXI@Z
MessageBoxA
wsprintfA
PathFileExistsA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
__bn_rfregdrv@0
__bn_urfregdrv@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ