RidFindDesktop
RidRemoveDesktop
Static task
static1
Behavioral task
behavioral1
Sample
1afd876b9502be97655860a503de62b0446be23b5f6abc095b5f1ce6793da861.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1afd876b9502be97655860a503de62b0446be23b5f6abc095b5f1ce6793da861.dll
Resource
win10v2004-20220901-en
Target
1afd876b9502be97655860a503de62b0446be23b5f6abc095b5f1ce6793da861
Size
102KB
MD5
ca3db170835aa8e5f1b793da810559c0
SHA1
099ba8675cf059682fc887413ba6b85ce2ac0852
SHA256
1afd876b9502be97655860a503de62b0446be23b5f6abc095b5f1ce6793da861
SHA512
9dd00776aef547583a2a8f01e42300c343de659f72aeadf8730785244710ba151bf462d4c33529715cc32848ab0ac3ad9b1521735cec66ccfe8fb0b534b409d5
SSDEEP
3072:Lq/4gxk9VV5cs54Jnr/EToZa2iW4hy7ga639YSutAx:wxk135qngZ2J7f6KBE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InterlockedCompareExchange
SetComputerNameW
SetUnhandledExceptionFilter
GetSystemDirectoryW
GetCurrentProcessId
SetFilePointerEx
LockResource
GetVolumePathNameA
ReadFileEx
GetShortPathNameA
CreateWaitableTimerW
GlobalGetAtomNameW
PostQueuedCompletionStatus
FileTimeToSystemTime
rand
RidFindDesktop
RidRemoveDesktop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ