DllRegisterServer
KXI
MHx229
Tin22PP
Vaevy8305
Static task
static1
Behavioral task
behavioral1
Sample
Claim_Copy.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
fathomed/dragonlike.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
fathomed/repastsVoter.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral4
Sample
fathomed/wisecrackedOlympian.js
Resource
win10v2004-20220812-en
Target
Claim_Copy_1314.iso
Size
798KB
MD5
2e62f53e3f4a54fb6adefabcb18aa0cf
SHA1
f082dccbbed989a1bf70405ca0f7f35e0aa85ad2
SHA256
6554de881f4d865fc77bb8d62e5a2580634424f3f8059c1854102b9cfa75b6cb
SHA512
eb7947117030ade163c561d6e9456531fb43ab95a811f5a7f6ce6097ede32a3364e74eed117d19fe1b6a3f2986e28efc096dfa29b40707570e91a739c573ab68
SSDEEP
12288:yjmIay70uFItsRw9DJpApXQRihGl/ZT8Qg1CIET/C:yjmIay71BRw9DvOAllKQwCIc
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStdHandle
GetCurrentDirectoryA
CreateFileA
SetFilePointer
CloseHandle
GetLastError
PeekNamedPipe
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
ExitProcess
CreateThread
GetCurrentThreadId
GetSystemDirectoryA
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateNamedPipeA
GetCurrentActCtx
DllRegisterServer
KXI
MHx229
Tin22PP
Vaevy8305
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ