ProgramBackupSkin
ProgramCommercial
ProgramCompile
ProgramGrep
ProgramKOfficeScroll
ProgramReadmeVertical
ProgramRemote
Static task
static1
Behavioral task
behavioral1
Sample
b8a9dbf3f13f2fd8dee24f7a66a403e85af09443fba7d793d9d085e45e5617cd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8a9dbf3f13f2fd8dee24f7a66a403e85af09443fba7d793d9d085e45e5617cd.dll
Resource
win10v2004-20220812-en
Target
b8a9dbf3f13f2fd8dee24f7a66a403e85af09443fba7d793d9d085e45e5617cd
Size
144KB
MD5
81b8959d0b996c2cd9d4325c51e7a800
SHA1
d717d9d5314f6d63865f872d57653e1dddc565f3
SHA256
b8a9dbf3f13f2fd8dee24f7a66a403e85af09443fba7d793d9d085e45e5617cd
SHA512
96411d51504b5c1a39e9378f3fab32240e0741809456d97dc3660140221676a72abec26e8573fec397a935bc339bcbb464651cd27d257b579363c547d02892ec
SSDEEP
1536:gfHwZV/Fw89hZZbo52cGWEL4mUQuvUjSjiHkoa1CR6lzJp:gYZFFw8+oL4mUBhCRU
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetHandleCount
SetHandleCount
CloseHandle
LocalFlags
lstrlenA
GetLocaleInfoW
memcpy
strlen
FindFirstFreeAce
CryptDeriveKey
InitiateSystemShutdownExW
CreatePrivateObjectSecurityEx
EnumServicesStatusExA
ProgramBackupSkin
ProgramCommercial
ProgramCompile
ProgramGrep
ProgramKOfficeScroll
ProgramReadmeVertical
ProgramRemote
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ