Drive
Noonraise
Officeweight
Wingdark
Static task
static1
Behavioral task
behavioral1
Sample
7427287604e93881e59bf3b7685a470ac589682e.dll
Resource
win7-20220414-en
Target
7427287604e93881e59bf3b7685a470ac589682e
Size
473KB
MD5
bd1e5cf467316c24f4a99e4d904ed28e
SHA1
7427287604e93881e59bf3b7685a470ac589682e
SHA256
b775a1f8663e7bdeef07cdd7497b91fa82dd7ab1015d138b2aeb8b51e77d3895
SHA512
5083f7b2a18cd7b2f8e4b254c7b01147c5de30eb96f99a09ef5015f5975fe11d99cf8d8bc26d72d4259c353fc8b79cde1938379b1dcdd092bf589e9aa97bb0e7
SSDEEP
12288:jSDeUvQ5cvZeHM4HL1VdzU9//p9EZxmTDZhCjaMgz5eRZ:jSaUpeHpHvm9//Pb7e
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RegCreateKeyW
RegCloseKey
RegQueryValueExW
ReadFile
SetEndOfFile
LocalAlloc
CreateFileW
GetSystemDirectoryW
FindFirstChangeNotificationW
Sleep
CloseHandle
CreateThread
VirtualProtectEx
GetWindowsDirectoryW
LocalFree
GetFileSize
DeleteCriticalSection
MoveFileW
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
MultiByteToWideChar
GetLastError
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapAlloc
HeapReAlloc
HeapFree
GetStdHandle
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
SetServiceW
EnumProtocolsW
EnumProcesses
GetDeviceDriverFileNameW
EnumProcessModules
QueryWorkingSet
EnumPageFilesW
GetWsChanges
GetDeviceDriverBaseNameW
InitializeProcessForWsWatch
Drive
Noonraise
Officeweight
Wingdark
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ