BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
8d2476c383172eb71f401b8016f896aa1f606799e587e9435e6dc261bca72ed5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d2476c383172eb71f401b8016f896aa1f606799e587e9435e6dc261bca72ed5.dll
Resource
win10v2004-20221111-en
Target
8d2476c383172eb71f401b8016f896aa1f606799e587e9435e6dc261bca72ed5
Size
28KB
MD5
f4bbf76f4a00338ae6634d15c8d9ca00
SHA1
067e066845a91fd1e4321572eff00206023bbcd0
SHA256
8d2476c383172eb71f401b8016f896aa1f606799e587e9435e6dc261bca72ed5
SHA512
ef7209726398e5f241a5a8f164d752850e51cef1263ef4c37063be57c2a8260459a2033201010c6c541c67e45b8a039f6190e25e9e6b5264a706eaa682e18278
SSDEEP
384:BK5HXbdSpVm0AS6YLYXm5up9ts/TSs0EC5YiOyIornsr:I58VHAS6YsXNpvs7Ss0ja0rnsr
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE