EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
35f0f44fdc3a131898dc7d8ec069bd3440d5f18c3fc21a30bd7ea5f45cd11597.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
35f0f44fdc3a131898dc7d8ec069bd3440d5f18c3fc21a30bd7ea5f45cd11597.dll
Resource
win10v2004-20220901-en
Target
35f0f44fdc3a131898dc7d8ec069bd3440d5f18c3fc21a30bd7ea5f45cd11597
Size
25KB
MD5
0cfaa75859ab63ee272e6707ed247fb0
SHA1
e4c411b7b9ee62633ddf318661e882a11e06878a
SHA256
35f0f44fdc3a131898dc7d8ec069bd3440d5f18c3fc21a30bd7ea5f45cd11597
SHA512
87b3cb44ee0c6ca1574ddae2d562c965d62143f85409a0380efefe01c44525ce7007f66c9e0a92ac1bcc12c35e92e8f25a71e3654558cef712d7ac09e9c8e5f0
SSDEEP
384:x7xL7iF7KL+vUYOUEE7v4vccPhn6dsFQ2FO6XGV0ZjZENl1IJmsWVVV6NdtTTE4g:hx/XAONFHGV0ENl1F5V6vS8E
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
CloseDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE