EarthCommoE
?RedirComplete@@YG_JDKUl98207long@@Ul26918729wex@@WE
?RestrictLowCost@@YG_JEPAXUmno284720984202747@@WE
Static task
static1
Behavioral task
behavioral1
Sample
346e91bb903e009f75b4e8e2872d16b1c934009494f92d52ef128c9e2fbd13b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
346e91bb903e009f75b4e8e2872d16b1c934009494f92d52ef128c9e2fbd13b8.exe
Resource
win10v2004-20220812-en
Target
346e91bb903e009f75b4e8e2872d16b1c934009494f92d52ef128c9e2fbd13b8
Size
63KB
MD5
643d53dea0b390c5418a424903dfd67d
SHA1
71d85107cb244f73c3b3df7101c4abee765dc7c2
SHA256
346e91bb903e009f75b4e8e2872d16b1c934009494f92d52ef128c9e2fbd13b8
SHA512
cb6d6770e146ffb57a187c8c20214a1fd1ee32a47d9afe467d4778f3fdc72711f1ca128d13a40476347fb219ff0ae9337fa92540e1577de6a7b79643c758293c
SSDEEP
1536:KutACHv7SPJ2qZwmSaHsZIJ8Hg6P9+cC50rrJo5:KutDvuBGmzWtg61+cC50Bo5
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
EarthCommoE
?RedirComplete@@YG_JDKUl98207long@@Ul26918729wex@@WE
?RestrictLowCost@@YG_JEPAXUmno284720984202747@@WE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ