Broughthard
Chargesis
Coolnothing
Grandgrew
SpellWhere
Static task
static1
Behavioral task
behavioral1
Sample
nde67wks.dll
Resource
win7-20220414-en
Target
nde67wks.tar
Size
923KB
MD5
b94268ab1032daba281e9d9f4407676f
SHA1
36e85ba5240d9f22b6736244637484b5fa129aa3
SHA256
0f01fd5896b88ced79f6f611de53a20385c7a5b2f7e443ed58bc5e449e768a29
SHA512
e02c87e4a6035444a7ae0e009960e9ccdf9f7c75bb5594a555ae4b25f9b5bfb742df12cb50fa53804ed8f17823126093b262c786c8c2513d694fcffb69f20978
SSDEEP
24576:LC/P+Jzkw1zr1ClPHFvBpjcSfBPK+9vRC72iQMpv4Ny6CCm4GyV:LW+Jzk20lNvBpjcSfBP79vRmfv4NjCno
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LockResource
VirtualProtectEx
OpenProcess
Sleep
GetSystemTime
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
GetWindowsDirectoryA
CreateFileA
FindFirstChangeNotificationA
QueryPerformanceCounter
GetVersionExA
GetDateFormatA
WriteConsoleW
CreateFileW
HeapSize
ReadConsoleW
WideCharToMultiByte
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
GetLastError
FreeLibrary
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
QueryPerformanceFrequency
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
GetStdHandle
GetFileType
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
OutputDebugStringW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Broughthard
Chargesis
Coolnothing
Grandgrew
SpellWhere
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ