func1
func2
start
Static task
static1
Behavioral task
behavioral1
Sample
f00220e7949e787226eb0c7e766e8dd55fff24cbb6619e1751a409074b1ac859.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f00220e7949e787226eb0c7e766e8dd55fff24cbb6619e1751a409074b1ac859.exe
Resource
win10v2004-20220812-en
Target
f00220e7949e787226eb0c7e766e8dd55fff24cbb6619e1751a409074b1ac859
Size
33KB
MD5
8f3ff67ce55bf8bf8ef44a59b53b20d6
SHA1
7847797e1f1aa1eb1608e67c5881df63f833e624
SHA256
f00220e7949e787226eb0c7e766e8dd55fff24cbb6619e1751a409074b1ac859
SHA512
5784837459514f8b08475e53efba4e668dce18570b147dd90b773fe11ed9498e1cca7ade5243903b3011ca5603538f8a0c84501315a14d9beb24c4bf1e7e1b66
SSDEEP
768:lu+ItE83S6crIOxC2qjFYSAyEF2wAFctQCkGqISh3fU7JI:lu+I+NrIOxC2MJAyEF2XcQCkrNfU9I
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
VirtualFree
ExitProcess
lstrcmpiA
VirtualProtect
IsBadReadPtr
GetProcAddress
LoadLibraryA
CreateThread
GetModuleHandleA
MessageBoxA
DefWindowProcA
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
SendMessageA
KillTimer
GetMessageA
DispatchMessageA
TranslateMessage
SetTimer
func1
func2
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ