CommandLineToArgvW
SHStrDupA
SHStrDupW
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-shcore-obsolete-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
api-ms-win-shcore-obsolete-l1-1-0.dll
Resource
win10v2004-20230221-en
Target
api-ms-win-shcore-obsolete-l1-1-0.dll
Size
59KB
MD5
7cbd0e9001b113c2a435a8758273bddc
SHA1
3d8223b3a293361e5f8d420bf4f72a97716573be
SHA256
a4b416cf70a396c6d88dcf72a26d4ee9a8b3f3f1a799531d9a0ddb06a852170a
SHA512
20d1ea50cb100f5b8deb9e3c60c0ce8d683b6682ed4e16eeb47a447ece8047c97763798e110a78bc8246f4cc0d2ddc798513ff933fd07b53cf681d0eecb5498a
SSDEEP
96:IRH4H3/C8Wzs+bB0SVYbSLYbtHqNOWAZdY+Ey6AXQEthYCSZjZ31Fj99:IRH4Xa59BHVhTE8ZFFj99
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
DisableThreadLibraryCalls
CommandLineToArgvW
SHStrDupA
SHStrDupW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ