@altate@0
@plusTokenAfter@4
Static task
static1
Behavioral task
behavioral1
Sample
287621cbd3dd3c8cfa36ea8482dd66be0eba17b701a1578251ec10cf4c04afb9.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
287621cbd3dd3c8cfa36ea8482dd66be0eba17b701a1578251ec10cf4c04afb9.exe
Resource
win10v2004-20220414-en
Target
287621cbd3dd3c8cfa36ea8482dd66be0eba17b701a1578251ec10cf4c04afb9
Size
3.8MB
MD5
2d48cb04270279d2671002d34e14153a
SHA1
952c2fb3dc4557c49b0b91b3ee6a19083e455d81
SHA256
287621cbd3dd3c8cfa36ea8482dd66be0eba17b701a1578251ec10cf4c04afb9
SHA512
aa83e36687809cb30efda459b3f510ef5878f01985b678bc7bfa7c5965fa99d9257ff270219a618e29920a8230ee8f074d96eaf04873223388e86af0be8ad62e
SSDEEP
49152:vYrpOYWEeiZ5oxFU8hvD/CeZqYojamUICI+9MlCsRWKGNQd9HuDObCiOEuA11Zpd:QrgY3udD9ojKKTnLm2od8
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetNumaNodeProcessorMask
ScrollConsoleScreenBufferW
HeapAlloc
SetProcessAffinityMask
SetNamedPipeHandleState
GetPrivateProfileStringW
GetOverlappedResult
SetVolumeMountPointW
DeleteVolumeMountPointW
GetVolumeNameForVolumeMountPointA
SetMailslotInfo
IsDBCSLeadByteEx
LoadResource
GlobalAlloc
GetProcAddress
LoadLibraryW
IsWow64Process
SetEnvironmentVariableW
FindFirstFileExA
UnmapViewOfFile
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleW
CreateFileW
GetClipCursor
GetCursor
RevertToSelf
@altate@0
@plusTokenAfter@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ