__NtCloseObjectAuditAlarm@0
__NtDeleteObjectAuditAlarm@4
__NtPrivilegeObjectAuditAlarm@4
Static task
static1
Behavioral task
behavioral1
Sample
1d4367d37f36a83880abc3f2535015cb9e8465c05ee0a0a6c2363981d7c013fb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d4367d37f36a83880abc3f2535015cb9e8465c05ee0a0a6c2363981d7c013fb.dll
Resource
win10v2004-20220812-en
Target
1d4367d37f36a83880abc3f2535015cb9e8465c05ee0a0a6c2363981d7c013fb
Size
35KB
MD5
90847242892794dd6c2c407e3abd8f90
SHA1
5ab4ba5e7a1515177e15d6feebd0ad99bb7b4bcb
SHA256
1d4367d37f36a83880abc3f2535015cb9e8465c05ee0a0a6c2363981d7c013fb
SHA512
642860013150d865ddc3c0e4ab0e6342d39bd95d4ac1bf7be9add38e33a1938cdaefb8c72fb12d9293489bafdff57c3bad0a1a501ef3d26bbf262cb805f37797
SSDEEP
768:y0l/cHMgwDBIjq2Xsrz+fHI9fHd6GHq2N5VwTf:y0ROMjBIxsrSHufHpJe
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MmFreeContiguousMemory
MmUnmapIoSpace
MmSizeOfMdl
MmMapIoSpace
MmAllocateContiguousMemory
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlInt64ToUnicodeString
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
RtlInitString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
_vsnprintf
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
RtlCopyString
RtlEqualString
strrchr
KeTickCount
wcsspn
RtlUnicodeStringToInteger
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
memset
__NtCloseObjectAuditAlarm@0
__NtDeleteObjectAuditAlarm@4
__NtPrivilegeObjectAuditAlarm@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ