?ClearOprj3@@YG_KPAX@Z
?Comerh3@@YG_KPAX@Z
?Consist34@@YG_KPAX@Z
?FantasticDay@@YG_KPAX@Z
?MeasureWeight@@YG_KPAX@Z
?Rollej2@@YG_KPAX@Z
?RollinUp@@YG_KPAX@Z
?Seropk2@@YG_KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
e39191d2e4f83b3cbec35d51d49625601b3ec25edf4b52b2d669f185d33203f5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e39191d2e4f83b3cbec35d51d49625601b3ec25edf4b52b2d669f185d33203f5.dll
Resource
win10v2004-20220812-en
Target
e39191d2e4f83b3cbec35d51d49625601b3ec25edf4b52b2d669f185d33203f5
Size
445KB
MD5
1f0709650c67c526c9edf90ef985a0c0
SHA1
d2a7142df64268082ff517bf842c2ea1f55c2091
SHA256
e39191d2e4f83b3cbec35d51d49625601b3ec25edf4b52b2d669f185d33203f5
SHA512
3781f8400100cdba93ec76da1b551d99c168cf70a73eb0dcc2ed19efae0a895ad05c9a1a34e8f2dde77fccc240f0d7cf6227b72105f9ec909a0807c09391694f
SSDEEP
6144:U4QU+3VhNPsOt8gbCCeglCeskyLwIcJ5puCOuF+53IykoNCDbRuNLdkzaE4:13+3nNPcglC3kwwIcJCCrdo8o5
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IoCreateDisk
IofCompleteRequest
IoBuildSynchronousFsdRequest
IoWMIRegistrationControl
ExGetSharedWaiterCount
CcFastMdlReadWait
SeTokenIsAdmin
RtlDowncaseUnicodeString
SeReleaseSubjectContext
RtlAddAccessAllowedAceEx
FsRtlSplitLargeMcb
IoQueryFileInformation
MmProbeAndLockPages
KdEnableDebugger
CcFastCopyWrite
CcDeferWrite
MmCanFileBeTruncated
ZwDeviceIoControlFile
ZwWriteFile
RtlFindLastBackwardRunClear
RtlFindLongestRunClear
PsImpersonateClient
IoDeleteController
ZwQuerySymbolicLinkObject
ExFreePoolWithTag
IoUpdateShareAccess
SeOpenObjectAuditAlarm
ZwFreeVirtualMemory
IoReuseIrp
RtlGenerate8dot3Name
IoGetDeviceInterfaceAlias
HalExamineMBR
ExRegisterCallback
KeDeregisterBugCheckCallback
SeUnlockSubjectContext
ExUuidCreate
RtlDeleteRegistryValue
MmUnmapLockedPages
ZwSetSecurityObject
RtlCopyLuid
PsGetCurrentProcess
CcUnpinRepinnedBcb
PsReturnPoolQuota
IoReleaseVpbSpinLock
IoStartPacket
ProbeForRead
PsChargeProcessPoolQuota
CcPinRead
IoReadPartitionTable
RtlInitializeBitMap
IoAllocateErrorLogEntry
MmSizeOfMdl
RtlInt64ToUnicodeString
RtlRandom
VerSetConditionMask
IoEnumerateDeviceObjectList
RtlFindClearRuns
ExInitializeResourceLite
ZwDeleteKey
IoInitializeTimer
RtlUnicodeToMultiByteN
CcMdlRead
RtlUnicodeStringToOemString
CcSetReadAheadGranularity
IoIsSystemThread
ZwOpenKey
PsTerminateSystemThread
RtlFindClearBits
ExCreateCallback
FsRtlCheckOplock
ZwNotifyChangeKey
FsRtlIsFatDbcsLegal
KeSaveFloatingPointState
IoGetDeviceAttachmentBaseRef
IoDeviceObjectType
RtlCopyString
RtlEqualString
MmPageEntireDriver
CcRepinBcb
MmBuildMdlForNonPagedPool
IoWriteErrorLogEntry
IoSetThreadHardErrorMode
FsRtlFreeFileLock
RtlxAnsiStringToUnicodeSize
KePulseEvent
IoDetachDevice
RtlCopySid
IoVerifyVolume
IoGetStackLimits
KeReleaseSemaphore
ExAcquireFastMutexUnsafe
IoSetDeviceToVerify
KeInitializeMutex
RtlInitAnsiString
ZwQueryKey
SeFreePrivileges
CcGetFileObjectFromBcb
IoDisconnectInterrupt
MmMapUserAddressesToPage
ExRaiseAccessViolation
IoBuildPartialMdl
IoSetStartIoAttributes
MmIsThisAnNtAsSystem
RtlAreBitsSet
IoFreeController
PsReferencePrimaryToken
KeInitializeDeviceQueue
KeInitializeTimer
ZwOpenFile
RtlSetDaclSecurityDescriptor
KeSetBasePriorityThread
KeSetTargetProcessorDpc
ExDeleteNPagedLookasideList
ObOpenObjectByPointer
KeReadStateSemaphore
ZwFsControlFile
ObQueryNameString
FsRtlGetNextFileLock
MmAdvanceMdl
RtlVerifyVersionInfo
MmAllocateMappingAddress
KeResetEvent
IoGetTopLevelIrp
IoCheckQuotaBufferValidity
RtlSubAuthoritySid
CcIsThereDirtyData
IoGetDeviceInterfaces
FsRtlNotifyUninitializeSync
IofCallDriver
KeWaitForMultipleObjects
RtlValidSecurityDescriptor
KeBugCheck
IoGetDeviceToVerify
CcCanIWrite
ExDeleteResourceLite
SeLockSubjectContext
KeRevertToUserAffinityThread
CcUninitializeCacheMap
RtlVolumeDeviceToDosName
ZwSetVolumeInformationFile
RtlInitString
IoGetDmaAdapter
RtlInitializeGenericTable
MmIsVerifierEnabled
RtlMapGenericMask
ObReleaseObjectSecurity
IoWritePartitionTableEx
ZwCreateEvent
PsGetCurrentProcessId
KeReadStateMutex
FsRtlAllocateFileLock
IoIsWdmVersionAvailable
IoSetShareAccess
RtlUpcaseUnicodeToOemN
CcCopyRead
ObMakeTemporaryObject
ZwMakeTemporaryObject
KeSetSystemAffinityThread
IoFreeMdl
PsLookupThreadByThreadId
MmHighestUserAddress
IoSetDeviceInterfaceState
MmIsAddressValid
IoReportResourceForDetection
MmMapIoSpace
SeSinglePrivilegeCheck
PoRegisterSystemState
PoCallDriver
DbgPrompt
IoRequestDeviceEject
KeInitializeQueue
RtlCreateSecurityDescriptor
FsRtlLookupLastLargeMcbEntry
IoRemoveShareAccess
FsRtlMdlWriteCompleteDev
RtlLengthSid
RtlInitUnicodeString
CcSetFileSizes
SeSetSecurityDescriptorInfo
ExReleaseFastMutexUnsafe
ExAcquireResourceSharedLite
KeInsertHeadQueue
KeGetCurrentThread
RtlInitializeUnicodePrefix
RtlAnsiCharToUnicodeChar
MmMapLockedPagesSpecifyCache
IoSetPartitionInformation
IoReadDiskSignature
PoRequestPowerIrp
ExVerifySuite
IoReadPartitionTableEx
KeSynchronizeExecution
ExGetPreviousMode
RtlAppendStringToString
RtlSetBits
FsRtlDeregisterUncProvider
RtlHashUnicodeString
ExGetExclusiveWaiterCount
FsRtlIsHpfsDbcsLegal
ObfReferenceObject
ObfDereferenceObject
KeInitializeApc
RtlUpperChar
KeQueryTimeIncrement
RtlPrefixUnicodeString
IoGetLowerDeviceObject
RtlGUIDFromString
PsIsThreadTerminating
ExIsProcessorFeaturePresent
MmForceSectionClosed
ExQueueWorkItem
RtlTimeToSecondsSince1980
CcFastCopyRead
PsGetVersion
PoUnregisterSystemState
KeReadStateEvent
KeInitializeSemaphore
RtlCharToInteger
FsRtlIsTotalDeviceFailure
ZwCreateDirectoryObject
RtlFindSetBits
CcMdlWriteComplete
KeQueryInterruptTime
RtlMultiByteToUnicodeN
IoGetRequestorProcessId
IoReleaseCancelSpinLock
ObInsertObject
IoCreateSymbolicLink
ZwOpenSymbolicLinkObject
IoCancelIrp
RtlWriteRegistryValue
IoCreateStreamFileObjectLite
RtlNtStatusToDosError
MmLockPagableDataSection
SeDeassignSecurity
RtlValidSid
RtlNumberOfClearBits
RtlxOemStringToUnicodeSize
RtlUnicodeStringToInteger
MmFreeMappingAddress
PsRevertToSelf
RtlxUnicodeStringToAnsiSize
ZwMapViewOfSection
RtlEqualSid
PsGetThreadProcessId
ObGetObjectSecurity
IoGetDiskDeviceObject
IoGetRequestorProcess
IoAllocateIrp
FsRtlCheckLockForWriteAccess
DbgBreakPointWithStatus
IoDeleteDevice
RtlTimeToTimeFields
IoInvalidateDeviceState
RtlCreateRegistryKey
ZwQueryValueKey
IoGetBootDiskInformation
IoSetHardErrorOrVerifyDevice
KeReleaseMutex
IoCreateSynchronizationEvent
RtlFindNextForwardRunClear
KeRemoveEntryDeviceQueue
KeSetEvent
?ClearOprj3@@YG_KPAX@Z
?Comerh3@@YG_KPAX@Z
?Consist34@@YG_KPAX@Z
?FantasticDay@@YG_KPAX@Z
?MeasureWeight@@YG_KPAX@Z
?Rollej2@@YG_KPAX@Z
?RollinUp@@YG_KPAX@Z
?Seropk2@@YG_KPAX@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ