?qDETCCdwetYRZHC_T_V@@YGGMH@Z
?sPK_MHIS_@@YGPAIPAE@Z
?_ZANeq_WQXGTEuakV_JQH@@YGDFPAJ
?pdpycaclnrlmJ__RO_D_Z@@YGJM@Z
?ixeoq_MJF@@YGXKI@Z
Static task
static1
Behavioral task
behavioral1
Sample
bf34cf956e38badf9e49314c6fdb3ff0be1b27d2f285180b484f5dcdcf20c3dd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf34cf956e38badf9e49314c6fdb3ff0be1b27d2f285180b484f5dcdcf20c3dd.dll
Resource
win10v2004-20220812-en
Target
bf34cf956e38badf9e49314c6fdb3ff0be1b27d2f285180b484f5dcdcf20c3dd
Size
36KB
MD5
0fa25ade56b857afefa131d16e6bfc62
SHA1
44987901a455c7eb86670d92d306d12528740995
SHA256
bf34cf956e38badf9e49314c6fdb3ff0be1b27d2f285180b484f5dcdcf20c3dd
SHA512
81c38e01391f914261805a055596f494df323d64d48d4fd4b618f0cdfe700408473472cda482c181769245cbea6071077097dd6c1e4c0c00031ca8b13b8b45a9
SSDEEP
768:fm9FovIzCfed49IuxdC3kFxt1GzEtVIvrDjKbN:fW/2eCXxd0kFxalDmb
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlInitString
IoAllocateMdl
ZwQueryInformationFile
RtlEqualString
RtlTimeFieldsToTime
IoUpdateShareAccess
ExCreateCallback
RtlNtStatusToDosError
KeSetImportanceDpc
ZwCreateDirectoryObject
RtlInitUnicodeString
ZwCreateFile
MmCanFileBeTruncated
IoGetDeviceToVerify
RtlEqualUnicodeString
CcRemapBcb
RtlDeleteRegistryValue
RtlRandom
atoi
RtlMultiByteToUnicodeN
ExDeleteResourceLite
RtlCompareString
RtlUpperChar
IoInitializeIrp
KeSetEvent
?qDETCCdwetYRZHC_T_V@@YGGMH@Z
?sPK_MHIS_@@YGPAIPAE@Z
?_ZANeq_WQXGTEuakV_JQH@@YGDFPAJ
?pdpycaclnrlmJ__RO_D_Z@@YGJM@Z
?ixeoq_MJF@@YGXKI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ