RJVQa11Y
RemoveSettings
YhrFH91
ZARSY62
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
BOiQKiECaUzWqF.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BOiQKiECaUzWqF.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
eLWCBMEWwlzsBt.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
eLWCBMEWwlzsBt.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
required info.lnk
Resource
win7-20220812-en
Target
20221101.zip.zip
Size
723KB
MD5
30a753619a2e3788dc9244c207762dc0
SHA1
b44e58127bdf31da0964212cba1a126ce2a1feb5
SHA256
6b2e4c9b0579938ce73bd39874b58a8f67c24f49a188f1f0ae6bcde26fb8b084
SHA512
4f5ade84fd869574db7a17c00fa0450f8d3f03ba9f9c4f4a22363027c2345f91096557d6691ebb24553caff98e5a619c6293a404eba16f92eb30aa142831cfd0
SSDEEP
12288:so/RItcfrA4f2bYJABhnVvsBQhG9SS0muEcRjOPr8v/S7eWUIU2wsaJL/0jSS0k6:x/2a/ebesDUQvC5tbaJbkSS0Ms7R
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetStdHandle
GetCommandLineA
FindFirstFileA
FindNextFileA
CloseHandle
ConnectNamedPipe
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
CreateNamedPipeA
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
WriteFile
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
MultiByteToWideChar
SetLastError
SetFilePointerEx
WriteConsoleW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
GetACP
IsValidCodePage
GetOEMCP
GetCPInfo
CreateFileW
GetStringTypeW
ExitProcess
GetModuleHandleExW
FlushFileBuffers
RtlUnwindEx
RJVQa11Y
RemoveSettings
YhrFH91
ZARSY62
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ