CloseTSObject
CollectTSObjectData
OpenTSObject
Static task
static1
Behavioral task
behavioral1
Sample
000beaf1e979ea166d9f3d0848bf42ced4049609f53644ead33269fac1db5a7b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
000beaf1e979ea166d9f3d0848bf42ced4049609f53644ead33269fac1db5a7b.dll
Resource
win10v2004-20220901-en
Target
000beaf1e979ea166d9f3d0848bf42ced4049609f53644ead33269fac1db5a7b
Size
336KB
MD5
9edbb84cad826eee2356559b5a0279a0
SHA1
02bf6a4c6984feaa6999b402030f33bd677c29ae
SHA256
000beaf1e979ea166d9f3d0848bf42ced4049609f53644ead33269fac1db5a7b
SHA512
82130e014d6cfa0aede8822bc40b25ead66feb23b96f0a521dc839259aeea45eb8113de7a7b98567619caaf2a9df9c8dddd4a4f6482bd83bcadaa2747b3e33e8
SSDEEP
3072:vDATTZsMl8/5ASsFJA93YnXFMsRnEr91ZJecT/xp2Sr9BzbWNNw:vDq1Hl25A3uYbnEJ1icT/rHZNWNN
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
wcsncat
_ltow
wcslen
NtClose
NtQuerySystemInformation
RtlInitUnicodeString
RtlNtStatusToDosError
NtQueryValueKey
NtOpenKey
WinStationQueryInformationW
StrConnectState
lstrlenW
DisableThreadLibraryCalls
HeapCreate
HeapDestroy
HeapReAlloc
HeapFree
HeapAlloc
DeregisterEventSource
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegisterEventSourceW
CloseTSObject
CollectTSObjectData
OpenTSObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ