HnmzDB983O8l
OuvPd16
Qra3897
maincase
Static task
static1
Behavioral task
behavioral1
Sample
LHmFnVLApInqJM.bat
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
LHmFnVLApInqJM.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Project info.lnk
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Project info.lnk
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
hJyTwqLfTrmTzY.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
hJyTwqLfTrmTzY.dll
Resource
win10v2004-20220812-en
Target
bad.vhd
Size
8.0MB
MD5
bd957d4a291714a467b4d7370b76b559
SHA1
653f7c4f76294613fb776742cb526f1e85085c9b
SHA256
0a5b828bc9aa9a6cb3c4a3c1ad5ff2be0b265c79711dd8988d52e74de1d490b6
SHA512
e3b5e531ff5a3866d1b4869e75e9f83dcf3d185fda2aaaeb082c2c4ffd4a832e3859114cff1c47f4d058c6eb2c4e40ff96dd97db3db91040b7e742f0407855ec
SSDEEP
98304:RDZ/uFtz4RDlhv1NcGYyPR9t5lc4HuSWUMCE5BiCGhm1dcEWrd:RDZ0z4Zlhv+yrtrcEuSW51YKd0rd
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CreateFileA
GetFileInformationByHandle
ReadFile
SetEndOfFile
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
HeapWalk
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
CreateThread
GetCurrentThreadId
GetModuleFileNameA
CreateFileMappingA
OpenFileMappingA
GetTempPathA
CreateActCtxA
ActivateActCtx
DeactivateActCtx
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TryEnterCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetProcAddress
WideCharToMultiByte
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
GetLastError
FreeLibrary
LoadLibraryExW
EncodePointer
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
MultiByteToWideChar
GetCurrentThread
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WaitForSingleObjectEx
WriteConsoleW
CreateFileW
SetEvent
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
LoadLibraryW
DecodePointer
HnmzDB983O8l
OuvPd16
Qra3897
maincase
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ