Gorgeous
NoMoreLies
Robinson
Static task
static1
Behavioral task
behavioral1
Sample
46947cd767a758a93ea70820b806483cb86550f86d961705719b386d436e50ef.exe
Resource
win7-20220414-en
Target
46947cd767a758a93ea70820b806483cb86550f86d961705719b386d436e50ef
Size
5.9MB
MD5
8ec9015238e53a37552979a18c514ccf
SHA1
235aead47f8dea471ef92bcb1ef6710399465566
SHA256
46947cd767a758a93ea70820b806483cb86550f86d961705719b386d436e50ef
SHA512
809eb9a5367b530b4f47889535e14a8fd9e8a9e1c9bc719f914da387243cccf533a76e3b471633b3583cc491d199d4311c3c4f8cc627342a33537edfc010a271
SSDEEP
98304:QDBG22lVyJyo23ApflcCiTHakqY0ioER1lKV924+nTeewIQUako0:Qcpb2s3qS7uY/W84+nTekFX
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RemoveVectoredExceptionHandler
EnumDateFormatsExW
FindResourceExW
WriteConsoleOutputCharacterA
LoadResource
HeapAlloc
SetWaitableTimer
HeapFree
GetModuleHandleExW
GlobalLock
LockFile
ConnectNamedPipe
GetModuleHandleW
GetConsoleAliasesA
TzSpecificLocalTimeToSystemTime
GlobalAlloc
GetLocaleInfoW
GetSystemTimeAdjustment
InterlockedPopEntrySList
GetFileAttributesA
GetExitCodeProcess
GetCompressedFileSizeA
GetTimeZoneInformation
GetEnvironmentVariableA
VirtualUnlock
GetProcAddress
GetAtomNameA
AddAtomA
GetTapeParameters
GlobalFindAtomW
SetConsoleCursorInfo
GlobalUnWire
lstrcatW
GetFileTime
GetCurrentProcessId
EnumCalendarInfoExA
LocalFree
LCMapStringW
LocalFileTimeToFileTime
CompareStringW
CompareStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
GetLastError
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
HeapSize
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableA
GetProcessDefaultLayout
Gorgeous
NoMoreLies
Robinson
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ