__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
Static task
static1
Behavioral task
behavioral1
Sample
cd5978be06ffae03409e3a259351ae38921a2ec592d2f9281e8164b895e12bd2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd5978be06ffae03409e3a259351ae38921a2ec592d2f9281e8164b895e12bd2.dll
Resource
win10v2004-20221111-en
Target
cd5978be06ffae03409e3a259351ae38921a2ec592d2f9281e8164b895e12bd2
Size
32KB
MD5
f08e97cdbc93dee0ec2bbca0246dc409
SHA1
1a8c1d44219fa6ac322f45c4d325dc7f5230f47a
SHA256
cd5978be06ffae03409e3a259351ae38921a2ec592d2f9281e8164b895e12bd2
SHA512
63cb99cb26444f7301858bbf0d3f31062f4f634f3280d47e4ee38a7c85f0cebbe6ed5d366db2fec3c646762e6084511cc86db44bddf7e04db32c74cbeeb7eb3c
SSDEEP
768:xT6nhZkvVrQ8c4/zHY/ZfNshsFWeLaKBHbhZ/aw4AQqnDf:N6sQ87/+lGKjQqD
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAddVerifierThunks
MmAllocateMappingAddress
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ