?DecodeArgumentA@@YG_KPAX@Z
?DecodeArgumentExW@@YG_KPAX@Z
?DecodeArgumentW@@YG_KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
9baa6af8979039410aabf6e14701eef262f94f57b7283ac1796b5f0fdd45e3aa.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9baa6af8979039410aabf6e14701eef262f94f57b7283ac1796b5f0fdd45e3aa.dll
Resource
win10v2004-20220812-en
Target
9baa6af8979039410aabf6e14701eef262f94f57b7283ac1796b5f0fdd45e3aa
Size
76KB
MD5
a2d0a2d6b3ece5342252a852af3706dc
SHA1
15427a3cab7e0bfac324fb783e408424b20a5da1
SHA256
9baa6af8979039410aabf6e14701eef262f94f57b7283ac1796b5f0fdd45e3aa
SHA512
f1b783ee77425257dea3a7a10b484ff18332ccdb26658de5ba83b84b3aa7357dcac6c0395271f350dd5ad905977322b0262151da8731f03912836f40f0eea434
SSDEEP
1536:Mg8cAjWU2V5PpMGj6rTMT+fvnLiUqkxf+6Hnvalt1R:56EV5PpMGj4riAxilt1
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KeGetCurrentThread
RtlUpcaseUnicodeChar
RtlInitUnicodeString
?DecodeArgumentA@@YG_KPAX@Z
?DecodeArgumentExW@@YG_KPAX@Z
?DecodeArgumentW@@YG_KPAX@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE