?IsNotProvider@@YGPAKD<V
?IncrementObjectOld@@YGXDPA_N<V
?ValidateObjectOld@@YGFMI<V
?InsertDialog@@YGEPAEPAE<V
?CopyDeviceOld@@YGPAFPAEKPAE<V
?OnListEx@@YGPAXKE<V
Static task
static1
Behavioral task
behavioral1
Sample
54ddd1f9b40ccd7826ff29141c9da67bf31bb5b5c2a4998aebad88a2b29e7271.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
54ddd1f9b40ccd7826ff29141c9da67bf31bb5b5c2a4998aebad88a2b29e7271.dll
Resource
win10v2004-20221111-en
Target
54ddd1f9b40ccd7826ff29141c9da67bf31bb5b5c2a4998aebad88a2b29e7271
Size
73KB
MD5
69840751abab11c822c78ffb257ac290
SHA1
870041ead802db5a48d7ee1740a59a192d89a41c
SHA256
54ddd1f9b40ccd7826ff29141c9da67bf31bb5b5c2a4998aebad88a2b29e7271
SHA512
b4512f0fa5939a30fad221201a1ff8e55723f695bea8033bb6bfc98188e13dd460eb4c42b90e7a96188c403c159672534d979a701b522df5f40286d80be71d7c
SSDEEP
1536:p5rAAulB8QQYJs6XVsUrSQm/wReuokbuMe4f4G:p5rB0Bg0amu/wkuft4G
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlInitializeGenericTable
ZwFlushKey
KeSetTimer
RtlCreateSecurityDescriptor
PsImpersonateClient
MmUnlockPages
KeSetEvent
IoSetDeviceToVerify
RtlClearBits
SeDeassignSecurity
IoGetDeviceInterfaces
MmAddVerifierThunks
IoReportResourceForDetection
SeTokenIsAdmin
ZwQueryVolumeInformationFile
ProbeForWrite
ZwEnumerateKey
IoDeviceObjectType
MmMapLockedPages
KeSetSystemAffinityThread
IoGetDeviceObjectPointer
PsTerminateSystemThread
IoRaiseHardError
IoGetStackLimits
ZwOpenSection
KeGetCurrentThread
RtlAreBitsClear
IoIsWdmVersionAvailable
ExFreePool
PsGetCurrentProcessId
RtlCompareMemory
FsRtlGetNextFileLock
RtlFindNextForwardRunClear
ZwOpenSymbolicLinkObject
MmHighestUserAddress
IoGetInitialStack
MmFreeMappingAddress
KeInitializeSemaphore
PsReturnPoolQuota
ObInsertObject
RtlValidSecurityDescriptor
ZwQueryValueKey
MmAllocateMappingAddress
CcSetBcbOwnerPointer
RtlInt64ToUnicodeString
CcMdlRead
PsRevertToSelf
CcCopyRead
ExGetExclusiveWaiterCount
ExNotifyCallback
CcUninitializeCacheMap
RtlWriteRegistryValue
CcFastCopyWrite
IoSetStartIoAttributes
IoQueryDeviceDescription
ExGetPreviousMode
CcGetFileObjectFromBcb
KeStackAttachProcess
IoGetDeviceProperty
IoSetPartitionInformation
IoAllocateController
IoSetTopLevelIrp
ExDeleteNPagedLookasideList
KeQuerySystemTime
ExAllocatePoolWithQuota
RtlUnicodeStringToAnsiString
RtlDeleteRegistryValue
RtlAddAccessAllowedAce
ObfDereferenceObject
IoAcquireCancelSpinLock
IoCheckEaBufferValidity
IoWriteErrorLogEntry
ZwNotifyChangeKey
KeRemoveEntryDeviceQueue
KeSetBasePriorityThread
IoFreeIrp
RtlCompareUnicodeString
?IsNotProvider@@YGPAKD<V
?IncrementObjectOld@@YGXDPA_N<V
?ValidateObjectOld@@YGFMI<V
?InsertDialog@@YGEPAEPAE<V
?CopyDeviceOld@@YGPAFPAEKPAE<V
?OnListEx@@YGPAXKE<V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ