GetQviilmnrgey
Lvlnylr
Llnaihaqoj
Static task
static1
Behavioral task
behavioral1
Sample
05e1b8e9fbfbdc4aa502915214d099b646a77732b0f9ac89cab60336b11cf702.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
05e1b8e9fbfbdc4aa502915214d099b646a77732b0f9ac89cab60336b11cf702.dll
Resource
win10v2004-20221111-en
Target
05e1b8e9fbfbdc4aa502915214d099b646a77732b0f9ac89cab60336b11cf702
Size
25KB
MD5
2311a558216d191f461cecee90d26040
SHA1
ce717f0e81233cb04857fc54823b3112bb6e8cdb
SHA256
05e1b8e9fbfbdc4aa502915214d099b646a77732b0f9ac89cab60336b11cf702
SHA512
54938a9b181ef712c0cde56553abdf850f634f003d8dbc86f7c1a103f62d592ae3d6f9a3a4fffb40727f67f4134fffd419477178e4fb5de48bd3255b2b25575e
SSDEEP
384:vW51fQQj2kEJ9RiEwfJ53hbU7tYtYgidYDLWo9vRTmI6pvJTu0key6:vU1fnj2kCRi3jhw7tPhuDfRmI8TS
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
FreeLibrary
GetTempFileNameA
CloseHandle
GetModuleHandleA
lstrcmpiA
GetCommandLineA
GetStartupInfoA
ExitProcess
ZwGetDevicePowerState
RtlDeleteTimerQueue
NtOpenMutant
RtlQueryProcessDebugInformation
qsort
RtlAbsoluteToSelfRelativeSD
ZwQueryDirectoryObject
_strlwr
wcstoul
ZwAdjustGroupsToken
NtOpenEvent
RtlInitializeAtomPackage
ZwQueryEaFile
RtlGetProcessHeaps
RtlGetOwnerSecurityDescriptor
NtQueryMultipleValueKey
NtDelayExecution
RtlDeNormalizeProcessParams
ZwAccessCheckByTypeAndAuditAlarm
ZwSetEvent
GetQviilmnrgey
Lvlnylr
Llnaihaqoj
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ