EvtShutdown
EvtStartup
inst
run
Static task
static1
Behavioral task
behavioral1
Sample
595a1861a955a2b8277b7c87d227324200438d83be516915f3d655567e5449dd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
595a1861a955a2b8277b7c87d227324200438d83be516915f3d655567e5449dd.dll
Resource
win10v2004-20221111-en
Target
595a1861a955a2b8277b7c87d227324200438d83be516915f3d655567e5449dd
Size
22KB
MD5
c20f9932d4f488da33a05e1e05567cd0
SHA1
6d97a97b7f9797e2628f32dab364a49aaf041bd0
SHA256
595a1861a955a2b8277b7c87d227324200438d83be516915f3d655567e5449dd
SHA512
c4ff179612194c0f8a2670fe86306a9c9f2fc1b6519e76953157f026c06b48b5dd53d9e9f434d9e57cc340cd475b9c2517f955ba5e430905f07a5dfc9a4acda9
SSDEEP
384:/NNyMJWWS/1ucNf/V0o16vtf5Pj7IMCAGg6DYoehfgUzp2S:/Sig1uE0o1EbCAHlJd
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
PostMessageA
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE