?IsNotProvider@@YGPAKD<V
?IncrementObjectOld@@YGXDPA_N<V
?ValidateObjectOld@@YGFMI<V
?InsertDialog@@YGEPAEPAE<V
?CopyDeviceOld@@YGPAFPAEKPAE<V
?OnListEx@@YGPAXKE<V
Static task
static1
Behavioral task
behavioral1
Sample
9c162981b4ac06029405577c98f0e52ec42e4c0f84bbf9d6f23cfeb49f765ebc.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c162981b4ac06029405577c98f0e52ec42e4c0f84bbf9d6f23cfeb49f765ebc.dll
Resource
win10v2004-20220812-en
Target
9c162981b4ac06029405577c98f0e52ec42e4c0f84bbf9d6f23cfeb49f765ebc
Size
445KB
MD5
c58a0d1f560b4cd3bf83469a47c483e4
SHA1
1d22257254cc2dfbb4db331d0050b2f266746972
SHA256
9c162981b4ac06029405577c98f0e52ec42e4c0f84bbf9d6f23cfeb49f765ebc
SHA512
39a595a9bc445023f66479d8809255e0506d1eacf69c4ceb0265b607f610f30dfb30ca895d23d80a620749639d82fca414831b8622504c4ef4a23d1ddb8da88c
SSDEEP
6144:n5DDmMQ8EhsOt8gbCCeglCeskyLwIcJ5puCOuF+53IykoNCDbRuNLdkzaE4:n5H48GcglC3kwwIcJCCrdo8o5
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlInitializeGenericTable
ZwFlushKey
KeSetTimer
RtlCreateSecurityDescriptor
PsImpersonateClient
MmUnlockPages
KeSetEvent
IoSetDeviceToVerify
RtlClearBits
SeDeassignSecurity
IoGetDeviceInterfaces
MmAddVerifierThunks
IoReportResourceForDetection
SeTokenIsAdmin
ZwQueryVolumeInformationFile
ProbeForWrite
ZwEnumerateKey
IoDeviceObjectType
MmMapLockedPages
KeSetSystemAffinityThread
IoGetDeviceObjectPointer
PsTerminateSystemThread
IoRaiseHardError
IoGetStackLimits
ZwOpenSection
KeGetCurrentThread
RtlAreBitsClear
IoIsWdmVersionAvailable
ExFreePool
PsGetCurrentProcessId
RtlCompareMemory
FsRtlGetNextFileLock
RtlFindNextForwardRunClear
ZwOpenSymbolicLinkObject
MmHighestUserAddress
IoGetInitialStack
MmFreeMappingAddress
KeInitializeSemaphore
PsReturnPoolQuota
ObInsertObject
RtlValidSecurityDescriptor
ZwQueryValueKey
MmAllocateMappingAddress
CcSetBcbOwnerPointer
RtlInt64ToUnicodeString
CcMdlRead
PsRevertToSelf
CcCopyRead
ExGetExclusiveWaiterCount
ExNotifyCallback
CcUninitializeCacheMap
RtlWriteRegistryValue
CcFastCopyWrite
IoSetStartIoAttributes
IoQueryDeviceDescription
ExGetPreviousMode
CcGetFileObjectFromBcb
KeStackAttachProcess
IoGetDeviceProperty
IoSetPartitionInformation
IoAllocateController
IoSetTopLevelIrp
ExDeleteNPagedLookasideList
KeQuerySystemTime
ExAllocatePoolWithQuota
RtlUnicodeStringToAnsiString
RtlDeleteRegistryValue
RtlAddAccessAllowedAce
ObfDereferenceObject
IoAcquireCancelSpinLock
IoCheckEaBufferValidity
IoWriteErrorLogEntry
ZwNotifyChangeKey
KeRemoveEntryDeviceQueue
KeSetBasePriorityThread
IoFreeIrp
RtlCompareUnicodeString
?IsNotProvider@@YGPAKD<V
?IncrementObjectOld@@YGXDPA_N<V
?ValidateObjectOld@@YGFMI<V
?InsertDialog@@YGEPAEPAE<V
?CopyDeviceOld@@YGPAFPAEKPAE<V
?OnListEx@@YGPAXKE<V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ