??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
45ccabb88fb42185f167d291f8a3743fae7ab8971647691f791390a859535561.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45ccabb88fb42185f167d291f8a3743fae7ab8971647691f791390a859535561.exe
Resource
win10v2004-20220812-en
Target
45ccabb88fb42185f167d291f8a3743fae7ab8971647691f791390a859535561
Size
219KB
MD5
93d00da9967032c538417fb37180ec3a
SHA1
763b4506167fc1dea035846c062fe33336f600a3
SHA256
45ccabb88fb42185f167d291f8a3743fae7ab8971647691f791390a859535561
SHA512
2652fafdfe69d9a1c1810cdd8d9433b4f2dd22adf7a725671a393e4784e2b63e619c6031d36fd3fcb34303abf3b7525bc33a19d9292ddb677686f2db98590fef
SSDEEP
6144:abmfaRAh4ehGHYcqAPOK7D4FY+vz3chEV:abmfaah4ekqmKbV
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlInitUnicodeString
ZwCreateFile
RtlFreeUnicodeString
ZwWriteFile
ZwQueryInformationFile
ZwCreateSection
ZwUnmapViewOfSection
ZwWaitForSingleObject
ZwSetInformationFile
ZwQuerySystemInformation
ZwFlushVirtualMemory
ZwMapViewOfSection
ZwReadFile
ZwFsControlFile
RtlCreateUnicodeString
ZwOpenFile
ZwCancelIoFile
RtlNtStatusToDosError
ZwClose
RtlFreeHeap
RtlAllocateHeap
RtlReAllocateHeap
_allmul
memset
_chkstk
_aulldiv
memcpy
_alldiv
memmove
?IsPathRooted@AvgBasPath@@YG_NPB_WI@Z
??1AvgSpinLockLocker@@QAE@XZ
??0AvgSpinLockLocker@@QAE@PAUAvgSpinLock@@_N@Z
?AvgDestroySysMini@@YGXXZ
?AvgInitializeSysMini@@YGHXZ
?InitializeEnvironment@AvgEnvironment@@YGHXZ
?DestroyEnvironment@AvgEnvironment@@YGXXZ
?AvgCreateErrorCodeFromWin32@@YGHW4_AvgErrorCodeSeverity@@K@Z
?AvgBasGetStackFrameModulePath@@YGHAAV?$IAvgString@_W$0A@@@ABUAvgBasStackFrameX86@@@Z
?AvgMemXor@@YGXPAEPBEI@Z
?Delete@AvgBasFs@@YGHPB_WV?$AvgFlags@W4FileDeleteFlagItems@AvgBasFs@@@@@Z
?AvgGetSystemTime@@YGHAA_K@Z
?AvgGenerateRandomBuffer@@YGXPAEI@Z
?Release@AvgBasCriticalSection@@QAGHXZ
?Acquire@AvgBasCriticalSection@@QAGHXZ
?Create@AvgBasCriticalSection@@QAGHXZ
??1AvgBasCriticalSection@@QAE@XZ
??0AvgBasCriticalSection@@QAE@XZ
?GetCurrentModuleHandle@AvgProcess@@YGPAXXZ
?GetDirectoryPathFromFilenamePath@AvgBasPath@@YGHAAU_AVG_UTF16CHAR_STR@@PB_WIPAI@Z
?GetTempDirPath@AvgBasPath@@YGHAAU_AVG_UTF16CHAR_STR@@PAI@Z
?GetFullPath@AvgBasPath@@YGHAAU_AVG_UTF16CHAR_STR@@PB_WIPAI@Z
??0AvgBasObjectFactoryImpl@detail@@QAE@XZ
??1AvgBasObjectFactoryImpl@detail@@QAE@XZ
?Initialize@AvgBasObjectFactoryImpl@detail@@QAGHPBUAvgBasObjectFactoryMapping@@I@Z
?SetProgramPath@AvgBasObjectFactoryImpl@detail@@QAGHPB_W@Z
?GetAvgObject@AvgBasObjectFactoryImpl@detail@@QAGHABU_AvgGuid@@PAPAX@Z
?UnloadSharedLibraries@AvgBasObjectFactoryImpl@detail@@QAGX_N@Z
?Sleep@AvgBasThread@@SGHH@Z
?GetSpecialFolder@AvgEnvironment@@YGHW4SpecialFolder@1@AAV?$IAvgString@_W$0A@@@@Z
?GetMaxPathLength@AvgEnvironment@@YGHAAIPB_W@Z
??0AvgBasSharedLibraryLoader@@QAE@PB_W@Z
??1AvgBasSharedLibraryLoader@@UAE@XZ
?Load@AvgBasSharedLibraryLoader@@QAGHPB_W@Z
?Unload@AvgBasSharedLibraryLoader@@UAGXXZ
?AttachTo@AvgBasSharedLibraryLoader@@QAGHPBDPCRAX@Z
??0AvgBasWinRegistryHandle@@QAE@W4AvgBasWinRegistryRootType@@@Z
??1AvgBasWinRegistryHandle@@QAE@XZ
?OpenKeyIfExists@AvgBasWinRegistryHandle@@QAGHABU?$AvgStringRefBase@_W$0A@@@@Z
?IsWow64ViewModeSupported@AvgBasWinRegistryHandle@@SG_NXZ
?SetViewMode@AvgBasWinRegistryHandle@@QAGHV?$AvgFlags@W4AvgBasWinRegistryViewModeValues@@@@@Z
?GetStringValue@AvgBasWinRegistryHandle@@QAGHAAV?$IAvgString@_W$0A@@@ABU?$AvgStringRefBase@_W$0A@@@@Z
?CloseKey@AvgBasWinRegistryHandle@@QAGXXZ
?AvgCompareString@@YGHPB_W0II@Z
?AvgFormatStringV@@YGHW4AvgCodePage@@PA_WIPB_WPAIPAD@Z
?DirectoryExists@AvgBasFs@@YGHPB_W@Z
?AvgGetStringSizeInElements@@YGIPB_W@Z
?AvgGetStringSizeInElements@@YGIPBD@Z
?Initialize@AvgBasThread@@QAGHPAVAvgBasEvent@@@Z
?GetThreadExitCode@AvgBasThread@@QAGHAAH@Z
?GetResourceType@AvgBasWaitable@@IBG?AW4AvgBasWaitableResourceType@@XZ
?GetForward@AvgBasWaitable@@IBGPAV1@XZ
?GetHandle@AvgBasWaitable@@IBGPAXXZ
?AvgCreateErrorCodeFromWin32@@YGHK@Z
?AvgLowerString@@YGHW4AvgCodePage@@PA_WIPB_WPAII@Z
??0AvgMiniHashCrc32@@QAE@XZ
??1AvgMiniHashCrc32@@QAE@XZ
?Reset@AvgMiniHashCrc32@@QAGXK@Z
?Add@AvgMiniHashCrc32@@QAGXPBEI@Z
?Get@AvgMiniHashCrc32@@QAGKXZ
?AvgConvertUtf162MbString@@YGHPADIPB_WW4AvgCodePage@@PAII@Z
?AvgBufferXor@@YGXPAEPBEI1I_J@Z
?GetModuleDirectory@AvgModule@@YGHPAXAAU_AVG_UTF16CHAR_STR@@PAI@Z
?Reset@AvgBasEvent@@QAGHXZ
?Set@AvgBasEvent@@QAGHXZ
?Wait@AvgBasEvent@@QAGHH@Z
?Create@AvgBasEvent@@QAGHW4ResetType@1@_N@Z
?Destroy@AvgBasWaitable@@UAGHXZ
?StopThread@AvgBasThread@@QAGHH@Z
?StartThread@AvgBasThread@@QAGHW4AvgPriority@@PAVAvgSecurityCtx@@V?$AvgFlags@W4ThreadFlag@AvgBasThread@@@@PBD@Z
?Cleanup@AvgBasThread@@MAGXXZ
?AvgWinZwOpenFile@@YGHPB_WPAPAXKPAU_IO_STATUS_BLOCK@@KK@Z
?AvgGetTimestamp@@YGKXZ
?AvgNtdll_RtlDosPathNameToNtPathName_T_EliminateDosDevice@@YGHPB_WPAU_UNICODE_STRING@@@Z
?FreeResource@AvgBasWaitable@@IAGHXZ
?AvgGetUtf162MbStringSize@@YGHAAIPB_WW4AvgCodePage@@I@Z
_commode
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
_fmode
_CxxThrowException
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__CxxFrameHandler3
_onexit
_lock
__dllonexit
_unlock
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
??_V@YAXPAX@Z
SetUnhandledExceptionFilter
GetLastError
WaitForMultipleObjectsEx
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
EncodePointer
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE