?DecodeArgumentA@@YG_KPAX@Z
?DecodeArgumentExW@@YG_KPAX@Z
?DecodeArgumentW@@YG_KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
a3312b0b46cbbaa077684fc07705d03f0fdbb155845a5a8140a291a066a9b9a4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a3312b0b46cbbaa077684fc07705d03f0fdbb155845a5a8140a291a066a9b9a4.dll
Resource
win10v2004-20220812-en
Target
a3312b0b46cbbaa077684fc07705d03f0fdbb155845a5a8140a291a066a9b9a4
Size
43KB
MD5
a53d66be376150650e717ca847f8f864
SHA1
79908d8ea419a645ee173883fa72b8c4610401f2
SHA256
a3312b0b46cbbaa077684fc07705d03f0fdbb155845a5a8140a291a066a9b9a4
SHA512
9a52100323c8edf2ffd3483b1f4b0045331431bbd2e2e66c8d59b228bca3d4751907c8112ace6c36ef8b1a5d06ed93d711d704ae19c6d017bbee1f77c571ed6f
SSDEEP
768:jO2gB20zY8AnvriplU2VHHF/r7poPGVZ6emTS9q+TX+VfvkoLhEULIOeU/:lg8cAjWU2V5PpMGj6rTkT+fvnLIOe
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KeGetCurrentThread
RtlUpcaseUnicodeChar
RtlInitUnicodeString
?DecodeArgumentA@@YG_KPAX@Z
?DecodeArgumentExW@@YG_KPAX@Z
?DecodeArgumentW@@YG_KPAX@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE