EndorsedTechnologyVersionBe
ItTheMechanismThe
OrgIncludingCommunityPlatform
StandaloneMayThe
Static task
static1
Behavioral task
behavioral1
Sample
2ce5cb0272ace74f90c0ce1fe9b7c7467da9b33bee99a3c907f910a7e0901831.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ce5cb0272ace74f90c0ce1fe9b7c7467da9b33bee99a3c907f910a7e0901831.dll
Resource
win10v2004-20220812-en
Target
2ce5cb0272ace74f90c0ce1fe9b7c7467da9b33bee99a3c907f910a7e0901831
Size
207KB
MD5
670531059ed48988ff98bde3b7e69875
SHA1
4e7370c202b3a48773e6cdc69456078a6ddee2db
SHA256
2ce5cb0272ace74f90c0ce1fe9b7c7467da9b33bee99a3c907f910a7e0901831
SHA512
4ea51e26651ec0840b0603eb910ffbb7d44925205d31028d5db3fba953767ee9b6ef210d7580f451bda2ec37c1b217a0334a53252d2cda8bd8d537e902ef4daf
SSDEEP
3072:warvEqiP7375TmhB75cAvStJ9QgxtiLDN2qOB7C38fNdm3UkMr1:wq8qiP/YjuAKag3ODY71PWk
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MapViewOfFile
UnmapViewOfFile
GetEnvironmentVariableW
GetFullPathNameW
GetTempFileNameW
DeleteFileW
HeapAlloc
GetFileType
CreateThread
WaitForSingleObject
GetCommandLineW
SetLastError
GetComputerNameExW
CompareFileTime
FindResourceW
CreateFileMappingW
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrcmpiW
GetSystemDirectoryW
GetModuleHandleW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
LocalAlloc
GetConsoleWindow
SuspendThread
lstrcmpiA
CreateFileW
CompareStringW
LockResource
HeapFree
GetTimeFormatW
GetDateFormatW
FileTimeToLocalFileTime
GetACP
WriteConsoleW
GetEnvironmentVariableA
LocalReAlloc
GetVersion
Sleep
QueryPerformanceCounter
UnhandledExceptionFilter
FindResourceExW
GetLocaleInfoW
GetSystemDefaultUILanguage
WideCharToMultiByte
SearchPathW
LocalFree
SetConsoleCtrlHandler
AllocConsole
HeapSetInformation
CloseHandle
SetConsoleCP
SetConsoleOutputCP
GenerateConsoleCtrlEvent
WriteConsoleInputA
SetConsoleMode
GetConsoleMode
GetStdHandle
OpenProcess
HeapDestroy
HeapCreate
GetProcessHeap
GetStartupInfoA
SetEvent
WaitForMultipleObjects
CreateEventW
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
DeviceIoControl
LoadResource
LoadCursorW
LoadStringW
DefWindowProcW
DestroyWindow
UnregisterClassW
LoadIconW
IsCharUpperA
RegisterClassW
CreateWindowExW
ShowWindow
GetSystemMenu
UnregisterClassA
GetForegroundWindow
SetTimer
CharNextW
GetDesktopWindow
RegOpenKeyW
IsValidSecurityDescriptor
GetSecurityDescriptorLength
RegCreateKeyW
RegDeleteKeyW
RegConnectRegistryW
RegEnumValueW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegOpenCurrentUser
CoTaskMemRealloc
CoSetProxyBlanket
CoTaskMemFree
CoRevokeClassObject
CoInitializeSecurity
CoUninitialize
exit
fseek
vfwprintf
wcsstr
printf
putchar
strchr
getenv
wcscspn
iswspace
iswalpha
memset
rand
wcschr
malloc
free
bsearch
wcsncmp
isdigit
ferror
fputs
fprintf
fopen
strcspn
fwrite
ftell
qsort
CertStrToNameW
PFXImportCertStore
CertEnumCertificateContextProperties
CertGetPublicKeyLength
CertDuplicateStore
CertAddCertificateLinkToStore
PFXExportCertStoreEx
CertSaveStore
CertGetNameStringW
CertNameToStrW
CertVerifySubjectCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertDeleteCertificateFromStore
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertRegisterPhysicalStore
CertOpenStore
CertCreateCertificateContext
CertCloseStore
CertFindExtension
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertFindCertificateInStore
CertFreeCertificateContext
CertFindCTLInStore
PathFindExtensionW
PathCombineW
PathFindExtensionA
UrlGetPartW
UuidCreate
InternetCreateUrlW
InternetCrackUrlW
WSAStringToAddressA
SCardReleaseContext
SCardEstablishContext
EndorsedTechnologyVersionBe
ItTheMechanismThe
OrgIncludingCommunityPlatform
StandaloneMayThe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ