CaseServer
EssUr365fOL1
XcH3814
ZRQy938Db
Static task
static1
Behavioral task
behavioral1
Sample
t1.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
t1.dll
Resource
win10v2004-20220812-en
Target
t1
Size
2.5MB
MD5
6fd72ce066b9be582e8cc41060490a28
SHA1
629a5782e564321c560ed64d9431a3274ff9362b
SHA256
ffdd8645465b3b680a5f43e67615c4f6254d315b643c323d0ffb4d8b288b7c6e
SHA512
7f17bd0a09379a4b3518c5530d18bb146f4078b8a4875c153f8c8f2d39597f041113034dc861dda737cd033c6080e37f455fec85acbda64d0777f54b73bf3dcc
SSDEEP
49152:sUV3vZSPtGWz/3zLBPz5Ud2uVN2qDRT52MhZdWAhNJr1Jk3p:JSPZz/jL9xuDFX2gZdWa1Jq
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CreateFileA
LockFile
ReadFile
WriteFile
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThread
GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
SwitchToFiber
CreateFiber
CreateFileMappingA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TryEnterCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetProcAddress
WideCharToMultiByte
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
GetLastError
FreeLibrary
LoadLibraryExW
EncodePointer
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
MultiByteToWideChar
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WaitForSingleObjectEx
CreateThread
WriteConsoleW
CreateFileW
SetEvent
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
LoadLibraryW
DecodePointer
CaseServer
EssUr365fOL1
XcH3814
ZRQy938Db
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ