BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
c942501d34d754578d6ce75a9325ea71ddaee4fbdec8fad4e58026e5e4ed0b6e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c942501d34d754578d6ce75a9325ea71ddaee4fbdec8fad4e58026e5e4ed0b6e.dll
Resource
win10v2004-20220901-en
Target
c942501d34d754578d6ce75a9325ea71ddaee4fbdec8fad4e58026e5e4ed0b6e
Size
166KB
MD5
9af9de1df7da66179f1a4181151d6d59
SHA1
0c8e561eec63bd956a9a3badb2faca4ac24da171
SHA256
c942501d34d754578d6ce75a9325ea71ddaee4fbdec8fad4e58026e5e4ed0b6e
SHA512
f4a883864a8bb26ec6493999bb424a961d47984a8308cc21d68cde53b9b4480b9401cf3d285c37aba65f6e552e79bb8f0b9639903121552c94b2766a97bc6cf0
SSDEEP
3072:2tZ9LuMBWF6ZKn9foNo+xgynvD8/fqnyy0RuQJa8ks9O34vJ3yjtDowx7QYfh63N:2tZQcHi9ANo+nvD83qnv9QsluOYyhDoo
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ