GetPort2ProcessList
WomTerminateProFromName
WomTerminateProcess
Static task
static1
Behavioral task
behavioral1
Sample
544b2690fb7e5245bd8de483993528e63c6f4c583023ee5201f83831b8c4b1ac.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
544b2690fb7e5245bd8de483993528e63c6f4c583023ee5201f83831b8c4b1ac.dll
Resource
win10v2004-20220901-en
Target
544b2690fb7e5245bd8de483993528e63c6f4c583023ee5201f83831b8c4b1ac
Size
384KB
MD5
9a2491d26be06ab85d0ee7020016738c
SHA1
de9ac7618be1f4b9ecff7e6274e426b8a6d9c83e
SHA256
544b2690fb7e5245bd8de483993528e63c6f4c583023ee5201f83831b8c4b1ac
SHA512
2704f3184c1b1aace5cb7d06a9b8d21459192c0599c5bc1307a8c35154f471a12991728d2be2f648479d58ca0e5294b05d382c557a818686037786d77b1b59bc
SSDEEP
6144:6bIMwJ0GFChs7oEccwxnmokMzHGdctoBL29mbyfWRkv35JJCE6x2LWgnfMr3afPl:1MkC9Ec1nmokgoV0mEWRlE6syu
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetPort2ProcessList
WomTerminateProFromName
WomTerminateProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ