EvtShutdown
EvtStartup
inst
run
Static task
static1
Behavioral task
behavioral1
Sample
c2264de11f46956dd8767af1e48ccf706118470f331ea429ef0223e69e64398e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2264de11f46956dd8767af1e48ccf706118470f331ea429ef0223e69e64398e.dll
Resource
win10v2004-20220901-en
Target
c2264de11f46956dd8767af1e48ccf706118470f331ea429ef0223e69e64398e
Size
26KB
MD5
0720fbe20e64ff42beb98fc2e1018710
SHA1
dc9b5cd419270f25f6998d9bf5afe485487f1227
SHA256
c2264de11f46956dd8767af1e48ccf706118470f331ea429ef0223e69e64398e
SHA512
274c81d9f23f5b19ebe301174ce0653248a1f4a05d1892e662e3080de5bf770eaa718518f8052b950cadf7bac663a8de4898d1b20823311e758b7e4b5f8bb52e
SSDEEP
384:yfUVdQzwcaGeC2NtBNnF6yDvLNmU15XA0f5P57IAtS/35yXVT4Icuvw1:8AQzwcsNbN9JmG5wu4vcmDAK
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
PostMessageA
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE