Start
Stop
Static task
static1
Behavioral task
behavioral1
Sample
1fe31f2595ec84f38476a019805ccee392d3c9fef351870c1a9d5cc9b2d909c2.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1fe31f2595ec84f38476a019805ccee392d3c9fef351870c1a9d5cc9b2d909c2.dll
Resource
win10v2004-20220414-en
Target
1fe31f2595ec84f38476a019805ccee392d3c9fef351870c1a9d5cc9b2d909c2
Size
30KB
MD5
5edf16be494c9598e7b49861a4a44756
SHA1
8110eee35629a5a537b6b301cfdb9f2dbc71f559
SHA256
1fe31f2595ec84f38476a019805ccee392d3c9fef351870c1a9d5cc9b2d909c2
SHA512
595055949e1ce6a651cf1f6762e745520418a7867215b5a2a1d4b0e323bc8e7b72b48a017194b4672cba7ad60b7e3fcbae243ce0a07becd08c00b73d78a798cd
SSDEEP
384:bcI5aEcfgChsRCppm6ba2z+uVetR7DDBuBziBH4v5S029CBYFBdfYvirsnp++ArZ:bRKsRswq8lczikS02wYD1fm++ArPOE9
hancitor
1811_67213
http://elesengrity.com/4/forum.php
http://lardempotr.ru/4/forum.php
http://dethavare.ru/4/forum.php
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcessHeap
HeapAlloc
HeapFree
GetEnvironmentVariableA
lstrcatA
CreateProcessA
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
GetThreadContext
SetThreadContext
ResumeThread
CloseHandle
Start
Stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ