EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
c25ccdd5501404fdbbd18f55bacfa4d60e07f125b724aa8dae2c62218ba4d3be.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c25ccdd5501404fdbbd18f55bacfa4d60e07f125b724aa8dae2c62218ba4d3be.dll
Resource
win10v2004-20220812-en
Target
c25ccdd5501404fdbbd18f55bacfa4d60e07f125b724aa8dae2c62218ba4d3be
Size
21KB
MD5
08a7515187e721e0fb44da134bd4a9d9
SHA1
8e3c595d6dca745a73d998ca08d079f059797054
SHA256
c25ccdd5501404fdbbd18f55bacfa4d60e07f125b724aa8dae2c62218ba4d3be
SHA512
8ccce900441b0fdab5e196b06699214ef073c0d83abf8bedd597673eb7efe5cc61a3550004ceb0cf06815cb1572f1f7e3c0a7afc47af9e4a8c11139afaaf4838
SSDEEP
384:W1P3kK7UecBxlQB+6nDR8BCLfHnZO59USo7ID8laRjyOvcIl4qGu/gbv0m:y1hMnE3nDACLfHsbfp8EwqcNqGu6M
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE