?klqbowjiCqugp@@YGEPADG@Z
?lyRSvxbU@@YGHF@Z
?zesFwzqqivf@@YG_NH@Z
?jfUfEFiziNek@@YGGPAHF@Z
?dwzlATlh@@YGHPAIF@Z
?cywdzeiuUegYgkiHmqgz@@YGIJ_N@Z
Static task
static1
Behavioral task
behavioral1
Sample
de30ce7825881a4f9ab117b0b7bf28a522b86735a68fffc36f5a7eb85dfe5810.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de30ce7825881a4f9ab117b0b7bf28a522b86735a68fffc36f5a7eb85dfe5810.dll
Resource
win10v2004-20220812-en
Target
de30ce7825881a4f9ab117b0b7bf28a522b86735a68fffc36f5a7eb85dfe5810
Size
42KB
MD5
0ff7747a034785f86404c1318a5da346
SHA1
3d6a860b6636df84d1ef533916e526c1834bb0de
SHA256
de30ce7825881a4f9ab117b0b7bf28a522b86735a68fffc36f5a7eb85dfe5810
SHA512
2e7829fe3333e851cabea085f8bbbfa703b1d2815c048d42bc38e4f53626a121e1dfb147f6c2d49c60cbdfb0c97406da2f9d237ceec781d9ff10b8f4a4336778
SSDEEP
768:g7oE8kZk+REIc/dofbohWtPkjUgE6mm02s7l6lWnxd:OoH+k+zc/+zcWPkSm0ngQx
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SeTokenIsRestricted
RtlxAnsiStringToUnicodeSize
IoInitializeTimer
IoReuseIrp
IoRaiseHardError
MmPageEntireDriver
KeQuerySystemTime
MmProbeAndLockPages
IoGetDeviceProperty
PoStartNextPowerIrp
FsRtlIsTotalDeviceFailure
KeReadStateMutex
IoGetDmaAdapter
ProbeForWrite
IoAllocateWorkItem
KeSetPriorityThread
MmFreeNonCachedMemory
RtlCreateRegistryKey
ZwAllocateVirtualMemory
RtlDeleteNoSplay
?klqbowjiCqugp@@YGEPADG@Z
?lyRSvxbU@@YGHF@Z
?zesFwzqqivf@@YG_NH@Z
?jfUfEFiziNek@@YGGPAHF@Z
?dwzlATlh@@YGHPAIF@Z
?cywdzeiuUegYgkiHmqgz@@YGIJ_N@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ