RemovePointOriginal@12
KillFolderA@12
RtlRectExW@8
ModifyStateNew@16
GenerateFolderPathOld@4
RtlExpression@4
FreeValue@12
IsMutantOld@12K\
Static task
static1
Behavioral task
behavioral1
Sample
8bd521c6aa0ed381adea08bb8317af91877d731b1f9722f5dc9e412ca8c89eae.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bd521c6aa0ed381adea08bb8317af91877d731b1f9722f5dc9e412ca8c89eae.dll
Resource
win10v2004-20221111-en
Target
8bd521c6aa0ed381adea08bb8317af91877d731b1f9722f5dc9e412ca8c89eae
Size
205KB
MD5
ee812c6cf68a1350bcebfa7571a4e339
SHA1
1fe90f920f3fe8efbf7f2d69c4bbb593073ff08d
SHA256
8bd521c6aa0ed381adea08bb8317af91877d731b1f9722f5dc9e412ca8c89eae
SHA512
a3c769520d9c51432e9b24d029050c015ffe025955cd48e9c32cecf07a6673a647f5a305fe9e6224de3407121f0b0e0e04108bba49efc8ab3c26610e51f69c91
SSDEEP
3072:O4lVsXJ6cN/T1gMINnTBnypL1WDrHu5GQJk8oMxbhy59nou6AAGZAsJqLhIuP:NKX0CINTBnyphCrOkx8okozsGGsMVI
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RemovePointOriginal@12
KillFolderA@12
RtlRectExW@8
ModifyStateNew@16
GenerateFolderPathOld@4
RtlExpression@4
FreeValue@12
IsMutantOld@12K\
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ