@altate@0
@plusTokenAfter@4
Static task
static1
Behavioral task
behavioral1
Sample
57c1859eda4e09e6c1e4e7473c182b307efc4a2e7ca31bd04835d9260e604a04.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
57c1859eda4e09e6c1e4e7473c182b307efc4a2e7ca31bd04835d9260e604a04.exe
Resource
win10v2004-20220414-en
Target
57c1859eda4e09e6c1e4e7473c182b307efc4a2e7ca31bd04835d9260e604a04
Size
3.8MB
MD5
384c8fe4b39ea4b83c8eec594d1851f1
SHA1
6d41e9496c2dc79c5b46fe33133b764aaa8a6e64
SHA256
57c1859eda4e09e6c1e4e7473c182b307efc4a2e7ca31bd04835d9260e604a04
SHA512
ddd9b07cbbfeee5c6044093b293bb4b176497f9a0ed8850f55729f65771387a7571c373d614491b8c17d2ce589e4d13aacf4b78e754da9aa6424556713b1cfd4
SSDEEP
98304:XhGhndbGpp2/8I7lhHI8+bDWFdVOTeM8pk8:Xan5rXlhH1+byFjPM8p
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetNumaNodeProcessorMask
ScrollConsoleScreenBufferW
HeapAlloc
GetProcessAffinityMask
SetNamedPipeHandleState
GetPrivateProfileStringW
GetOverlappedResult
SetVolumeMountPointW
DeleteVolumeMountPointW
GetVolumeNameForVolumeMountPointA
SetMailslotInfo
IsDBCSLeadByteEx
LoadResource
GlobalAlloc
GetProcAddress
LoadLibraryW
IsWow64Process
SetEnvironmentVariableW
FindFirstFileExW
UnmapViewOfFile
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleW
CreateFileW
GetClipCursor
GetCursorInfo
RevertToSelf
@altate@0
@plusTokenAfter@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ