LiHPwRPmgYqo
setPath
Behavioral task
behavioral1
Sample
bum_0109.dll
Resource
win7-20220901-en
Target
bum_0109.bin
Size
1.1MB
MD5
7505f06d4c671c572f550cba3d34e2ea
SHA1
e59a8fd2d359443e11f94417f53cc9333dd8cfc7
SHA256
34781ec029c522322a117d0aee0de90eb6bb9f80f2c640c84f16ec6809f5723a
SHA512
5320d4fcd16088e42950907fa9109d0e7b8472676b8bd080d9e481ba6114c053ccbafa16122b4e6142ea2fe31ef05413f1a4094bb4d31597278ba7c053076e25
SSDEEP
24576:9x2ubccfCEN1Wpv9hOQn7G9Zx/tGggFQhrxtxcZfeoO:RTCyWN9QQnq9Zx/ZgShrxtyfeo
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
StrToIntA
StrChrA
PathFindFileNameW
VirtualFree
lstrcpyA
lstrcmpA
lstrcatA
GetProcAddress
FreeLibrary
VirtualAlloc
GetCurrentThread
GetCurrentThreadId
CloseHandle
GetModuleHandleW
VirtualProtectEx
LoadLibraryA
GetModuleHandleA
VirtualQuery
lstrlenA
VirtualQueryEx
GetCurrentProcess
UnmapViewOfFile
LiHPwRPmgYqo
setPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ