KUnlN73f1l
runprog
Overview
overview
3Static
static
documents.lnk
windows7-x64
3documents.lnk
windows10-1703-x64
3refreshene...ed.cmd
windows7-x64
1refreshene...ed.cmd
windows10-1703-x64
1refreshene...rs.dll
windows7-x64
3refreshene...rs.dll
windows10-1703-x64
3refreshene...ts.vbs
windows7-x64
3refreshene...ts.vbs
windows10-1703-x64
1Static task
static1
Behavioral task
behavioral1
Sample
documents.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
documents.lnk
Resource
win10-20220901-en
Behavioral task
behavioral3
Sample
refresheners/fragileSniffed.cmd
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
refresheners/fragileSniffed.cmd
Resource
win10-20220812-en
Behavioral task
behavioral5
Sample
refresheners/irregulars.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
refresheners/irregulars.dll
Resource
win10-20220812-en
Behavioral task
behavioral7
Sample
refresheners/unmodishlyDrifts.vbs
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
refresheners/unmodishlyDrifts.vbs
Resource
win10-20220901-en
Target
54d1795507a4c1d7227fa647f34dd52c7db9e0997f6440c6ef87df992de3b63f.zip
Size
1.5MB
MD5
78902f01a984e9ca4c58e010728c030b
SHA1
a76bb0ca9457f3c10e2bd26c349e2e43b0793496
SHA256
7fb5077019a5ba7d9081e02c09e729ec0ce8f4d12d65e392011b96d00b9667f7
SHA512
ae690cbc3a937e77d4ac6adc1c89f4b555837aa5f3d624b23f09fbff3979fdd16b988597b85271b71a9f66539c3105f66c156eed00015a024e797133fd8aa87f
SSDEEP
24576:d+0lPkmnqZ3nAK7+Plbjy6qSaUuo/Jl/K+rGFDwMicvTdQS1YpPL3cler5ILNBsh:d+0gQRvqRUuoxw+rGFDwvcBY6sO0tRzF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
CreateThread
GetCurrentThreadId
OpenThread
SuspendThread
GetModuleFileNameA
SwitchToFiber
DeleteFiber
CreateFiber
ConvertThreadToFiber
CreateActCtxA
ActivateActCtx
DeactivateActCtx
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TryEnterCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetProcAddress
WideCharToMultiByte
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
GetLastError
FreeLibrary
LoadLibraryExW
EncodePointer
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
MultiByteToWideChar
GetCurrentThread
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WaitForSingleObjectEx
WriteConsoleW
CreateFileW
SetEvent
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
LoadLibraryW
DecodePointer
KUnlN73f1l
runprog
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ