BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
dbee0c6225740962c6a1d250ea7b092beccee427b6b80c753d04b0b5828f5cc7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dbee0c6225740962c6a1d250ea7b092beccee427b6b80c753d04b0b5828f5cc7.dll
Resource
win10v2004-20220812-en
Target
dbee0c6225740962c6a1d250ea7b092beccee427b6b80c753d04b0b5828f5cc7
Size
170KB
MD5
1f8990731ea30eeaf42fc3d8588a1697
SHA1
b3b26486bb2db499ec84468b2655bc735cb31e5b
SHA256
dbee0c6225740962c6a1d250ea7b092beccee427b6b80c753d04b0b5828f5cc7
SHA512
39ee77cbae2b4fc948027375d0289d93072b3707433c80785ca437e000fb5d3fdd02c23c0a845400e917b81933ce9ce81aece21d76bcda56669ed377832cb182
SSDEEP
3072:G/I4kZ1TAzYNDeh8dgKQpcDp7zwi5w2yl0iz4/Qu8076Ba6eoi44UxNb:TbPcIDewrfJ0i5FFnQu80WEoi4Jx
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ