RehhcSSDT
ServiceMain
winsafe
Behavioral task
behavioral1
Sample
ef9a471e2803d6b80d598886725571ec981ae4fa0b5cc539c65e9251e4cdb38a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef9a471e2803d6b80d598886725571ec981ae4fa0b5cc539c65e9251e4cdb38a.dll
Resource
win10v2004-20221111-en
Target
ef9a471e2803d6b80d598886725571ec981ae4fa0b5cc539c65e9251e4cdb38a
Size
44KB
MD5
a9fb3950b3da46bf7020ff3bc6bf9910
SHA1
0f92ad87bd081e7958b3dcb18628ab0799e15667
SHA256
ef9a471e2803d6b80d598886725571ec981ae4fa0b5cc539c65e9251e4cdb38a
SHA512
7ac10977af94b7626ac34c2debd1c9b99039b83b632d63d2f6fbc3ed96ba70bde322a3e7b941d7f32a3ae3eeb18bda590d1b99d3e1c929f75138ae0e2132b59d
SSDEEP
768:dYH9azqLJ/YhOZ5DlS47Ln2hqtLE5NioW0rLaB+IHu4CwESXbijSTIzb/Sr0QCP1:dYHMzqd/QWDYE2hkE5k0LpIfCwXrgEUt
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RehhcSSDT
ServiceMain
winsafe
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ