?DispatchCover@@YG_KPAX@Z
?DispatchJoy@@YG_KPAX@Z
?DispatchLevel@@YG_KPAX@Z
?DispatchTarget@@YG_KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
73deef480f00ff6ffd82604a5a1764d8cbc71c3de143ca9cdc59eb3495947185.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73deef480f00ff6ffd82604a5a1764d8cbc71c3de143ca9cdc59eb3495947185.dll
Resource
win10v2004-20220812-en
Target
73deef480f00ff6ffd82604a5a1764d8cbc71c3de143ca9cdc59eb3495947185
Size
181KB
MD5
5bd4fa337af70c0af711e4dc1ba7afe0
SHA1
fe392500e31d9269812dbe98b42f207072620e7c
SHA256
73deef480f00ff6ffd82604a5a1764d8cbc71c3de143ca9cdc59eb3495947185
SHA512
cd602bb610643e17e36c27d7ce0a3fd80cc282afcbbdc56dc4db189cdd4b5c38521e1f2340c64db138fca18700b08320f8a8747c26bc7ba02f8f12010c1e25c2
SSDEEP
3072:blBniD/0X7nG2D9rNm03U8FAfw9W0Flb9IcFsN+msn8REcitf0+R3TKEUx41eR:T/nG2Lk8ifw9WW18REztfDRDEM
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IoGetDeviceToVerify
ExRaiseAccessViolation
RtlFindClearBits
DbgPrompt
KefAcquireSpinLockAtDpcLevel
SeQueryAuthenticationIdToken
IoInitializeIrp
IofCompleteRequest
PsGetThreadProcessId
KeBugCheck
KeSynchronizeExecution
KeSaveFloatingPointState
MmMapUserAddressesToPage
FsRtlIsHpfsDbcsLegal
IoWMIWriteEvent
ZwEnumerateKey
RtlInsertUnicodePrefix
KeReleaseSemaphore
HalExamineMBR
IoReleaseCancelSpinLock
RtlClearAllBits
CcMdlRead
ExFreePool
RtlNumberOfClearBits
PsReturnPoolQuota
PsTerminateSystemThread
SeTokenIsAdmin
PsCreateSystemThread
MmIsAddressValid
MmQuerySystemSize
ZwReadFile
ZwSetVolumeInformationFile
RtlAddAccessAllowedAce
PsGetCurrentProcessId
RtlIsNameLegalDOS8Dot3
PsRevertToSelf
KeQueryTimeIncrement
IoCancelIrp
ExAcquireResourceSharedLite
RtlFindClearBitsAndSet
KeSetImportanceDpc
PsGetProcessExitTime
CcRepinBcb
IoWMIRegistrationControl
RtlEqualString
IoThreadToProcess
KeInitializeSemaphore
RtlAnsiCharToUnicodeChar
ExVerifySuite
IoIsSystemThread
IoFreeMdl
CcUnpinDataForThread
IoSetShareAccess
RtlCopyUnicodeString
KeCancelTimer
RtlFindClearRuns
MmIsVerifierEnabled
IoEnumerateDeviceObjectList
KdDisableDebugger
FsRtlLookupLastLargeMcbEntry
RtlValidSecurityDescriptor
IoWriteErrorLogEntry
SeOpenObjectAuditAlarm
RtlValidSid
MmPageEntireDriver
IoIsWdmVersionAvailable
ObfDereferenceObject
FsRtlCheckOplock
IoSetPartitionInformationEx
FsRtlMdlWriteCompleteDev
FsRtlCheckLockForReadAccess
RtlAnsiStringToUnicodeString
KeInitializeTimerEx
ZwCreateEvent
ZwSetSecurityObject
RtlSubAuthoritySid
IoAllocateMdl
ZwUnloadDriver
IoCreateDevice
ExAcquireFastMutexUnsafe
RtlSetBits
IoGetStackLimits
RtlInitString
RtlGetNextRange
ZwQueryObject
RtlLengthSid
MmSizeOfMdl
KeUnstackDetachProcess
KeReadStateMutex
IoQueryDeviceDescription
CcUninitializeCacheMap
KeSetBasePriorityThread
PoRegisterSystemState
CcMdlWriteComplete
RtlCreateRegistryKey
CcFastCopyWrite
CcDeferWrite
FsRtlIsNameInExpression
RtlVolumeDeviceToDosName
MmResetDriverPaging
IoSetPartitionInformation
IoReadDiskSignature
IoGetDeviceAttachmentBaseRef
IoGetBootDiskInformation
KeInitializeQueue
SeDeleteObjectAuditAlarm
PsIsThreadTerminating
ProbeForRead
ExUnregisterCallback
RtlFindLastBackwardRunClear
CcZeroData
KeReadStateEvent
CcSetBcbOwnerPointer
IoRegisterDeviceInterface
RtlxOemStringToUnicodeSize
FsRtlAllocateFileLock
RtlFreeUnicodeString
ZwQuerySymbolicLinkObject
RtlUpcaseUnicodeChar
IoInitializeTimer
CcInitializeCacheMap
KeDetachProcess
KeSetTargetProcessorDpc
IoVolumeDeviceToDosName
IoRemoveShareAccess
ExIsProcessorFeaturePresent
KeGetCurrentThread
FsRtlFreeFileLock
PsSetLoadImageNotifyRoutine
RtlInitAnsiString
CcSetReadAheadGranularity
RtlHashUnicodeString
MmMapIoSpace
IofCallDriver
IoQueryFileInformation
RtlCreateSecurityDescriptor
RtlOemToUnicodeN
RtlCopyString
RtlUnicodeToMultiByteN
MmAddVerifierThunks
RtlCopySid
MmHighestUserAddress
IoAllocateErrorLogEntry
RtlTimeToSecondsSince1980
ZwDeviceIoControlFile
RtlClearBits
CcRemapBcb
RtlInt64ToUnicodeString
KeResetEvent
IoGetDeviceProperty
ExInitializeResourceLite
PsChargeProcessPoolQuota
RtlQueryRegistryValues
MmCanFileBeTruncated
CcGetFileObjectFromBcb
KeSetSystemAffinityThread
FsRtlGetNextFileLock
ZwOpenKey
ObQueryNameString
SeUnlockSubjectContext
KeFlushQueuedDpcs
IoSetThreadHardErrorMode
IoReadPartitionTableEx
MmBuildMdlForNonPagedPool
RtlUpcaseUnicodeToOemN
IoSetStartIoAttributes
RtlEqualUnicodeString
IoCreateSynchronizationEvent
ExQueueWorkItem
RtlInitializeUnicodePrefix
KeReadStateTimer
IoCreateStreamFileObjectLite
ZwCreateSection
IoRegisterFileSystem
ExRaiseDatatypeMisalignment
MmUnmapIoSpace
MmAllocatePagesForMdl
CcUnpinRepinnedBcb
MmAdvanceMdl
IoBuildSynchronousFsdRequest
RtlFindLongestRunClear
CcPinMappedData
RtlTimeToTimeFields
SeQueryInformationToken
CcPinRead
IoStartNextPacket
ObCreateObject
KeSetEvent
RtlNtStatusToDosError
KeSetKernelStackSwapEnable
KeInitializeTimer
CcSetFileSizes
MmUnlockPages
PsGetCurrentProcess
RtlAddAccessAllowedAceEx
RtlRemoveUnicodePrefix
IoDetachDevice
ZwFreeVirtualMemory
ExGetSharedWaiterCount
RtlxUnicodeStringToAnsiSize
IoAllocateIrp
IoDeviceObjectType
PsReferencePrimaryToken
MmMapLockedPages
IoReleaseRemoveLockAndWaitEx
IoReleaseVpbSpinLock
CcMapData
MmIsThisAnNtAsSystem
IoReadPartitionTable
IoUpdateShareAccess
RtlWriteRegistryValue
CcFastMdlReadWait
FsRtlSplitLargeMcb
PsGetCurrentThread
IoStartTimer
RtlFreeAnsiString
IoGetDeviceInterfaceAlias
ZwQueryKey
KeDeregisterBugCheckCallback
KeRegisterBugCheckCallback
IoReleaseRemoveLockEx
IoFreeWorkItem
RtlGUIDFromString
MmProbeAndLockProcessPages
RtlEqualSid
FsRtlNotifyUninitializeSync
IoCreateSymbolicLink
CcPreparePinWrite
KeEnterCriticalRegion
IoOpenDeviceRegistryKey
IoSetDeviceToVerify
PoSetSystemState
KeInitializeMutex
RtlInitUnicodeString
PoCallDriver
SeFreePrivileges
KeBugCheckEx
IoDeleteDevice
CcSetDirtyPinnedData
IoWritePartitionTableEx
ZwPowerInformation
ZwNotifyChangeKey
RtlVerifyVersionInfo
IoCreateNotificationEvent
KeStackAttachProcess
IoStartPacket
ExReleaseFastMutexUnsafe
CcFastCopyRead
CcIsThereDirtyData
ExUuidCreate
RtlPrefixUnicodeString
KePulseEvent
RtlDeleteRegistryValue
IoCheckShareAccess
ProbeForWrite
?DispatchCover@@YG_KPAX@Z
?DispatchJoy@@YG_KPAX@Z
?DispatchLevel@@YG_KPAX@Z
?DispatchTarget@@YG_KPAX@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ