EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
d07d55288d2814b37ac331964696dc30d5a83bc8e082689ce1e7f377d18b205a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d07d55288d2814b37ac331964696dc30d5a83bc8e082689ce1e7f377d18b205a.dll
Resource
win10v2004-20220812-en
Target
d07d55288d2814b37ac331964696dc30d5a83bc8e082689ce1e7f377d18b205a
Size
22KB
MD5
e5dd402b54e4256c6aeca25169429c20
SHA1
b250130110fb9759495725eabee5a0d14f6a0eda
SHA256
d07d55288d2814b37ac331964696dc30d5a83bc8e082689ce1e7f377d18b205a
SHA512
f4ca9ce1bdd63e1bfc93c94d4ce012b7dac4384e0a2b2fd37001038903d7a3697f8610b8c252f770f10c442bf3921964e6b65424f8560d5cce320333ce5634fd
SSDEEP
384:CN403MZhWaqoQz/T+lTOkTYrg+aJo7IcAoVF8W0D1n:CuWa4/T+tOf1SuAopK1
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE