?DispatchCover@@YG_KPAX@Z
?DispatchJoy@@YG_KPAX@Z
?DispatchLevel@@YG_KPAX@Z
?DispatchTarget@@YG_KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
765731ad7c804b5e9a58fee6dad22e0f20aac82af214899da43c7b168bafa837.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
765731ad7c804b5e9a58fee6dad22e0f20aac82af214899da43c7b168bafa837.dll
Resource
win10v2004-20220812-en
Target
765731ad7c804b5e9a58fee6dad22e0f20aac82af214899da43c7b168bafa837
Size
115KB
MD5
64f0609d6cb761c6abbf231cb498f030
SHA1
91d59d62eae107064303d416d8aa81a9c6f07b30
SHA256
765731ad7c804b5e9a58fee6dad22e0f20aac82af214899da43c7b168bafa837
SHA512
10702b797b48055eafe1efb4b27eb354b574ca34144052a146370a34ac8992df388357572b23d0c9923b47c29733c93b39fda442e3163c49465ba86e4953b1a2
SSDEEP
3072:NKqzm0usFzQijDEF0437xXM6EzMM9gn2xr3qu:NKqzhRFzQXzy6d/n1u
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlGenerate8dot3Name
ExReleaseFastMutexUnsafe
CcPinRead
IoFreeMdl
IoVerifyVolume
KeReadStateSemaphore
RtlFindClearBits
FsRtlGetNextFileLock
CcUninitializeCacheMap
RtlSetDaclSecurityDescriptor
IoFreeController
FsRtlAllocateFileLock
RtlDeleteRegistryValue
IoVolumeDeviceToDosName
KeRundownQueue
IoCreateNotificationEvent
MmUnlockPagableImageSection
RtlInsertUnicodePrefix
IoRequestDeviceEject
RtlAddAccessAllowedAce
ZwAllocateVirtualMemory
ZwFsControlFile
CcPinMappedData
MmMapLockedPages
KeSetImportanceDpc
IoReadDiskSignature
IoAllocateWorkItem
IoGetDeviceObjectPointer
IoDeleteSymbolicLink
RtlCreateRegistryKey
MmUnmapReservedMapping
MmFlushImageSection
CcMdlReadComplete
IoConnectInterrupt
MmResetDriverPaging
RtlTimeToSecondsSince1980
ObInsertObject
IoInitializeTimer
RtlWriteRegistryValue
ZwQuerySymbolicLinkObject
RtlCopyString
IoCsqRemoveIrp
IoCreateSymbolicLink
IoGetStackLimits
CcSetDirtyPinnedData
SeReleaseSubjectContext
IoDetachDevice
ExFreePoolWithTag
MmProbeAndLockProcessPages
RtlHashUnicodeString
ExReinitializeResourceLite
CcUnpinData
SeSinglePrivilegeCheck
CcUnpinDataForThread
KeStackAttachProcess
PoSetPowerState
ExLocalTimeToSystemTime
KeQueryInterruptTime
ZwQueryObject
IoGetDeviceInterfaceAlias
IoStartNextPacket
IoGetDiskDeviceObject
KeEnterCriticalRegion
ZwFreeVirtualMemory
IoReleaseRemoveLockAndWaitEx
SeSetSecurityDescriptorInfo
CcFastMdlReadWait
KeSynchronizeExecution
RtlxUnicodeStringToAnsiSize
RtlFreeAnsiString
IoCreateStreamFileObjectLite
KdDisableDebugger
IoSetShareAccess
IoAllocateAdapterChannel
IoMakeAssociatedIrp
PoSetSystemState
KeInitializeDpc
MmAllocateNonCachedMemory
RtlUpcaseUnicodeChar
RtlValidSid
SeCaptureSubjectContext
CcSetBcbOwnerPointer
IoStartTimer
KeSetSystemAffinityThread
KeInitializeDeviceQueue
MmGetSystemRoutineAddress
CcZeroData
KeGetCurrentThread
ExGetPreviousMode
ExReleaseResourceLite
CcFastCopyWrite
SeAppendPrivileges
IoReleaseVpbSpinLock
RtlFreeOemString
ExRaiseAccessViolation
ZwNotifyChangeKey
IoAllocateErrorLogEntry
FsRtlSplitLargeMcb
IoBuildSynchronousFsdRequest
RtlClearBits
MmPageEntireDriver
CcMdlWriteComplete
IoIsOperationSynchronous
ZwCreateFile
IoRaiseHardError
ZwDeleteValueKey
RtlIntegerToUnicodeString
IoInitializeRemoveLockEx
IoDeleteDevice
FsRtlNotifyUninitializeSync
IoSetStartIoAttributes
IoFreeWorkItem
MmUnlockPages
RtlDeleteElementGenericTable
IoGetLowerDeviceObject
DbgPrompt
KeClearEvent
WRITE_REGISTER_ULONG
RtlDelete
CcFastCopyRead
RtlInitString
RtlCheckRegistryKey
RtlUpcaseUnicodeToOemN
KeInitializeTimerEx
MmProbeAndLockPages
SeDeassignSecurity
IoGetDriverObjectExtension
FsRtlAreNamesEqual
KeInitializeApc
KeDetachProcess
READ_REGISTER_ULONG
ExNotifyCallback
RtlInitializeSid
IoThreadToProcess
RtlSetBits
ZwFlushKey
ZwEnumerateValueKey
RtlGetVersion
FsRtlLookupLastLargeMcbEntry
RtlIsNameLegalDOS8Dot3
FsRtlFreeFileLock
ProbeForWrite
ZwSetValueKey
KeWaitForSingleObject
ZwOpenKey
PsLookupThreadByThreadId
RtlAreBitsSet
KeQueryActiveProcessors
IoReportResourceForDetection
FsRtlIsTotalDeviceFailure
KeQueryTimeIncrement
RtlCompareUnicodeString
RtlValidSecurityDescriptor
KeRestoreFloatingPointState
MmUnsecureVirtualMemory
IoSetDeviceInterfaceState
SeQueryAuthenticationIdToken
CcIsThereDirtyData
CcMdlWriteAbort
IoGetDeviceInterfaces
RtlGetNextRange
MmMapIoSpace
RtlClearAllBits
FsRtlCheckLockForReadAccess
KeSetKernelStackSwapEnable
ExAllocatePool
RtlCreateUnicodeString
IoInvalidateDeviceRelations
PsGetProcessId
FsRtlDissectName
ExAllocatePoolWithQuotaTag
RtlUnicodeToOemN
IoGetRequestorProcess
RtlMultiByteToUnicodeN
FsRtlCurrentBatchOplock
RtlCopySid
PsGetCurrentProcess
ZwQueryKey
ExQueueWorkItem
IoRegisterFileSystem
PsTerminateSystemThread
SeFreePrivileges
ObfDereferenceObject
KeSetEvent
ExAllocatePoolWithQuota
IoWMIRegistrationControl
RtlRemoveUnicodePrefix
RtlInitializeGenericTable
ZwCreateEvent
RtlAddAccessAllowedAceEx
IoDeleteController
PoUnregisterSystemState
IoGetDeviceToVerify
IoOpenDeviceRegistryKey
KeInsertQueue
RtlAppendStringToString
RtlFindLongestRunClear
RtlInitAnsiString
RtlTimeToTimeFields
ZwQueryValueKey
KeRemoveEntryDeviceQueue
SeImpersonateClientEx
IoGetAttachedDevice
FsRtlFastCheckLockForWrite
KeDelayExecutionThread
KefAcquireSpinLockAtDpcLevel
MmBuildMdlForNonPagedPool
ExGetSharedWaiterCount
IoAllocateIrp
FsRtlIsFatDbcsLegal
strncpy
MmGetPhysicalAddress
IoBuildPartialMdl
IoCheckQuotaBufferValidity
MmFreePagesFromMdl
IoReportDetectedDevice
ExAcquireResourceSharedLite
IoCheckShareAccess
RtlPrefixUnicodeString
IoGetRelatedDeviceObject
ZwOpenSymbolicLinkObject
PsChargeProcessPoolQuota
MmCanFileBeTruncated
CcCopyWrite
IoUpdateShareAccess
IoAllocateMdl
IoFreeIrp
SeAccessCheck
RtlFindSetBits
SeDeleteObjectAuditAlarm
ZwMakeTemporaryObject
MmAllocatePagesForMdl
IoGetDeviceAttachmentBaseRef
KeFlushQueuedDpcs
RtlSecondsSince1980ToTime
KeRemoveQueue
KeBugCheck
PsDereferencePrimaryToken
PsLookupProcessByProcessId
ObReferenceObjectByHandle
KeAttachProcess
RtlUpcaseUnicodeString
RtlQueryRegistryValues
ZwEnumerateKey
IoQueryDeviceDescription
IoSetPartitionInformationEx
RtlUpperString
RtlFreeUnicodeString
MmAllocateMappingAddress
SeLockSubjectContext
MmSetAddressRangeModified
PsIsThreadTerminating
ExRegisterCallback
ExGetExclusiveWaiterCount
MmIsDriverVerifying
KeCancelTimer
SeValidSecurityDescriptor
IoIsSystemThread
IoRemoveShareAccess
ZwCreateKey
RtlFillMemoryUlong
KeInitializeTimer
FsRtlIsHpfsDbcsLegal
IoInvalidateDeviceState
RtlSubAuthoritySid
IoUnregisterFileSystem
RtlxOemStringToUnicodeSize
ExFreePool
RtlAnsiStringToUnicodeString
ZwSetSecurityObject
RtlCharToInteger
IoSetTopLevelIrp
PsSetLoadImageNotifyRoutine
IoWriteErrorLogEntry
RtlCopyUnicodeString
RtlStringFromGUID
ZwSetVolumeInformationFile
?DispatchCover@@YG_KPAX@Z
?DispatchJoy@@YG_KPAX@Z
?DispatchLevel@@YG_KPAX@Z
?DispatchTarget@@YG_KPAX@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ