ANFTazoXUcCWTVEq
BpfSyiKsOCW
DirCUuTJeQXHdOvn
FUZUloXUteO
GQjASCIGAvXNyHey
KmajjpmdaaglCW
RiRFnWZOaKzSfWXx
XKZeGtVPybRktb
dyuabshduyasdasidkasa
jTSlHhLpVrdk
myJTDmqszbUNDOKo
pClNYDXOgaQ
ssLvIdjsgTs
tTfiTFjMXCBcA
wdgGPXAXUklqcKQ
Static task
static1
Behavioral task
behavioral1
Sample
treasury.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
treasury.dll
Resource
win10-20220812-en
Target
treasury.db
Size
679KB
MD5
d6d9279f33ae617f303a7d23d3a9d4c6
SHA1
00f2dcc3851ae48c8d23739d051aad423a824010
SHA256
3b5f1e4942e4d13778e9ad9cd051ee2820e55b06966472e5764facecbcc94f28
SHA512
1ce4b8df974639cbaf7d396050092ada1d2f67efc829d0871980eb337cccef11307e7e5709d9af763ccde31bd6ee9a40ba8f7c644aa8ee64a141b6c7b80994b2
SSDEEP
6144:NMjneLstVgH2yICXFa98HrqnlSGbezqOcLf/1O5800oBKMvUfEfm/A:NMjeqd2XxGbfOqfVmKMuY
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetFileType
CloseHandle
GetLastError
DeleteFileA
CreateEventW
VirtualAlloc
OpenFile
GetFileSize
WaitForSingleObject
CreateFileA
GetFontLanguageInfo
GetBkMode
StrPBrkA
StrChrIA
ANFTazoXUcCWTVEq
BpfSyiKsOCW
DirCUuTJeQXHdOvn
FUZUloXUteO
GQjASCIGAvXNyHey
KmajjpmdaaglCW
RiRFnWZOaKzSfWXx
XKZeGtVPybRktb
dyuabshduyasdasidkasa
jTSlHhLpVrdk
myJTDmqszbUNDOKo
pClNYDXOgaQ
ssLvIdjsgTs
tTfiTFjMXCBcA
wdgGPXAXUklqcKQ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE