?IsNotProvider@@YGPAKD<V
?IncrementObjectOld@@YGXDPA_N<V
?ValidateObjectOld@@YGFMI<V
?InsertDialog@@YGEPAEPAE<V
?CopyDeviceOld@@YGPAFPAEKPAE<V
?OnListEx@@YGPAXKE<V
Static task
static1
Behavioral task
behavioral1
Sample
249305f91f6b2cd434d0f9a527369a35242755a1453e5970fc4f12bcb4902297.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
249305f91f6b2cd434d0f9a527369a35242755a1453e5970fc4f12bcb4902297.dll
Resource
win10v2004-20220812-en
Target
249305f91f6b2cd434d0f9a527369a35242755a1453e5970fc4f12bcb4902297
Size
73KB
MD5
d0b7604eb635e4b76d53d83350bf1ef4
SHA1
da17048c8e9c595a1b2dc9f95b3c8addab8f66ff
SHA256
249305f91f6b2cd434d0f9a527369a35242755a1453e5970fc4f12bcb4902297
SHA512
9d9c7b19ccf46dff3926763de7fdf56b964304024edb19794f1a01909b02f5257ea7435fbc119ebc503db6f26f71de8164af4a23a0fc68c9740051a50e81a6dd
SSDEEP
1536:05rAAulB8QQYJs6XVsUrSQm/wReuoxR9duRMsq6nm:05rB0Bg0amu/wkuGTsq6nm
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlInitializeGenericTable
ZwFlushKey
KeSetTimer
RtlCreateSecurityDescriptor
PsImpersonateClient
MmUnlockPages
KeSetEvent
IoSetDeviceToVerify
RtlClearBits
SeDeassignSecurity
IoGetDeviceInterfaces
MmAddVerifierThunks
IoReportResourceForDetection
SeTokenIsAdmin
ZwQueryVolumeInformationFile
ProbeForWrite
ZwEnumerateKey
IoDeviceObjectType
MmMapLockedPages
KeSetSystemAffinityThread
IoGetDeviceObjectPointer
PsTerminateSystemThread
IoRaiseHardError
IoGetStackLimits
ZwOpenSection
KeGetCurrentThread
RtlAreBitsClear
IoIsWdmVersionAvailable
ExFreePool
PsGetCurrentProcessId
RtlCompareMemory
FsRtlGetNextFileLock
RtlFindNextForwardRunClear
ZwOpenSymbolicLinkObject
MmHighestUserAddress
IoGetInitialStack
MmFreeMappingAddress
KeInitializeSemaphore
PsReturnPoolQuota
ObInsertObject
RtlValidSecurityDescriptor
ZwQueryValueKey
MmAllocateMappingAddress
CcSetBcbOwnerPointer
RtlInt64ToUnicodeString
CcMdlRead
PsRevertToSelf
CcCopyRead
ExGetExclusiveWaiterCount
ExNotifyCallback
CcUninitializeCacheMap
RtlWriteRegistryValue
CcFastCopyWrite
IoSetStartIoAttributes
IoQueryDeviceDescription
ExGetPreviousMode
CcGetFileObjectFromBcb
KeStackAttachProcess
IoGetDeviceProperty
IoSetPartitionInformation
IoAllocateController
IoSetTopLevelIrp
ExDeleteNPagedLookasideList
KeQuerySystemTime
ExAllocatePoolWithQuota
RtlUnicodeStringToAnsiString
RtlDeleteRegistryValue
RtlAddAccessAllowedAce
ObfDereferenceObject
IoAcquireCancelSpinLock
IoCheckEaBufferValidity
IoWriteErrorLogEntry
ZwNotifyChangeKey
KeRemoveEntryDeviceQueue
KeSetBasePriorityThread
IoFreeIrp
RtlCompareUnicodeString
?IsNotProvider@@YGPAKD<V
?IncrementObjectOld@@YGXDPA_N<V
?ValidateObjectOld@@YGFMI<V
?InsertDialog@@YGEPAEPAE<V
?CopyDeviceOld@@YGPAFPAEKPAE<V
?OnListEx@@YGPAXKE<V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ