EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
b1288801435ace32121c2b6de10d9d89c01936cfe7e905eb5f7a142b36926270.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b1288801435ace32121c2b6de10d9d89c01936cfe7e905eb5f7a142b36926270.dll
Resource
win10v2004-20221111-en
Target
b1288801435ace32121c2b6de10d9d89c01936cfe7e905eb5f7a142b36926270
Size
84KB
MD5
00141bb1e10778a488e26e596ae72cec
SHA1
b0d65e36fcf7ec64fa4ddaeecb734c742fb47538
SHA256
b1288801435ace32121c2b6de10d9d89c01936cfe7e905eb5f7a142b36926270
SHA512
b1f81d826141c1161e34d1858b730adc8742fb283763fe1057f5b746f7732a862d8841061cbee8e24257130f796625aa2c3cf5e646b164f00d7933015a175dd5
SSDEEP
768:j9x6txNrc47nrx2hQjE55pmTFa4nSQPvmHO5CHI4T2fsOP:j9x6txmUVj4sFaQvdwssq
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE