??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
363d23b28d8bfd8ba5a03ea63147a202ba1aeda1a9cdb7105cc7e8978cd2dea0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
363d23b28d8bfd8ba5a03ea63147a202ba1aeda1a9cdb7105cc7e8978cd2dea0.exe
Resource
win10v2004-20220812-en
Target
363d23b28d8bfd8ba5a03ea63147a202ba1aeda1a9cdb7105cc7e8978cd2dea0
Size
308KB
MD5
3d9b509b78598e54b51c490185b2d8a0
SHA1
70a7a319976c484f8bafae9ccb44f4221b81f784
SHA256
363d23b28d8bfd8ba5a03ea63147a202ba1aeda1a9cdb7105cc7e8978cd2dea0
SHA512
2d85beeaad8b9eaf9689a8c6c17140b5905768744d3197516aed36750c5ac17fb9121e896f740a2fe1de61c9e657167939f1c5ad141b3e588bf33b1e4bb257f5
SSDEEP
6144:Rntbmtv7ECjjW1MJpZ5MTaxvujFfcvgLOhNkc/6+/9xuA7BkFhHN:JhmNECvWMJpZ5MTaxvujFfcvAk6IxuAm
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
BD_MD5
?ClearService@Com@Util@@YGJXZ
?RegService@Com@Util@@YGJABU_GUID@@0PA_W1@Z
?RegObject@Com@Util@@YGJABU_GUID@@0PA_W1@Z
?CreateObjectByIID@Com@Util@@YGJABU_GUID@@PAPAX@Z
GetLogController
?GetService@Com@Util@@YGJABU_GUID@@PAPAX@Z
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
MoveFileExW
WaitForSingleObject
GetLastError
MultiByteToWideChar
FindFirstFileW
FindClose
FindNextFileW
CreateMutexW
InitializeCriticalSectionAndSpinCount
SetLastError
CreateFileW
GetFileAttributesW
CreateDirectoryW
ReadFile
GetFileSize
GetLocalTime
lstrlenW
lstrlenA
GetModuleFileNameW
GetProcAddress
CopyFileW
LoadLibraryW
FreeLibrary
ExpandEnvironmentStringsW
RemoveDirectoryW
DeleteFileW
InterlockedExchangeAdd
EnterCriticalSection
LeaveCriticalSection
GetTickCount
WideCharToMultiByte
RaiseException
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
IsProcessorFeaturePresent
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
RegQueryInfoKeyW
RegCreateKeyExW
RegCloseKey
GetUserNameW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SHGetSpecialFolderPathW
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
CoCreateGuid
StringFromGUID2
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
SysStringLen
VarBstrCmp
SysAllocStringLen
VariantInit
VariantClear
VariantCopy
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_BADOFF@std@@3_JB
?_Orphan_all@_Container_base0@std@@QAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
SHSetValueW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
wcscpy_s
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
memcpy
_CxxThrowException
__set_app_type
_fmode
_commode
__setusermatherr
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy_s
memmove_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
_vsnwprintf_s
memmove
strnlen
wmemcpy_s
_purecall
_vscwprintf
vswprintf_s
_vscprintf
vsprintf_s
free
wcschr
wcsncat_s
_wcsicmp
_wcslwr_s
iswspace
wcsnlen
_wfopen_s
fwrite
fclose
fseek
ftell
fread_s
_recalloc
calloc
_wcsnicmp
wcsncpy_s
_wtoi
wcsspn
wcscspn
_wcsrev
_wsplitpath_s
_wtoi64
_configthreadlocale
wcscat_s
??0exception@std@@QAE@XZ
wcsstr
memset
__CxxFrameHandler3
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_crt_debugger_hook
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE