EvtShutdown
EvtStartup
inst
run
Static task
static1
Behavioral task
behavioral1
Sample
d730bb01594914a6968e8349913ab8d6cc64ba910cd64cd4915f87fcc5ef05b6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d730bb01594914a6968e8349913ab8d6cc64ba910cd64cd4915f87fcc5ef05b6.dll
Resource
win10v2004-20221111-en
Target
d730bb01594914a6968e8349913ab8d6cc64ba910cd64cd4915f87fcc5ef05b6
Size
80KB
MD5
1f911151e46d5afe28ab2a7c3d0a5d96
SHA1
7c22ee412bbfd8a1c7a8670b21ce56e23b7a6b5a
SHA256
d730bb01594914a6968e8349913ab8d6cc64ba910cd64cd4915f87fcc5ef05b6
SHA512
a4904f8828f7b95b7d643b0205ebc3030ab0a5986b480c5f3b6686a08239b5e4e12c828e320972c8252ea98e654a9bbf336ab902c927d45fa4f755dd5c0a7ca2
SSDEEP
384:pCnOJsQJb8m/u6kotQPbT6VP2Nf5PO7I9LCk4TvHxqlHMlKZOxx8PcwCwSRdJgZ+:I4zWBPh/dmh4sHwPiwQJy4Rt/
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
PostMessageA
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE