Qruncore
RJVQa11Y
YhrFH91
ZARSY62
Overview
overview
10Static
static
Document_9109.iso
windows7-x64
3Document_9109.iso
windows10-2004-x64
3Document.lnk
windows7-x64
3Document.lnk
windows10-2004-x64
3maidservan...ng.cmd
windows7-x64
1maidservan...ng.cmd
windows10-2004-x64
1maidservan...ed.dll
windows7-x64
10maidservan...ed.dll
windows10-2004-x64
10maidservan...ss.bat
windows7-x64
1maidservan...ss.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Document_9109.iso
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Document_9109.iso
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Document.lnk
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
Document.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
maidservant/allotting.cmd
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
maidservant/allotting.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
maidservant/immortalized.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
maidservant/immortalized.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
maidservant/sleeplessness.bat
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
maidservant/sleeplessness.bat
Resource
win10v2004-20220812-en
Target
Document_9109.iso
Size
978KB
MD5
2f2721079b1fe617302d6d7cc454c11b
SHA1
511e48d97d0e65b85db36c6faad7212f1838105d
SHA256
bd9f0668b465891dbacd4fe217df1ea91042b2c711b2d26fdbb057ece06e830b
SHA512
afac900897416d62f294258092ddd80014f1700950f01e54b90e17f2fe2a455e8773c80108ad1daf933ada27d177631e47ba783472635c562ad1217f268ecef0
SSDEEP
24576:JF1A7ynR+djiZJmZqNd8fBpO8ZCK0zCXAfV4/:JF1znQJOsW8DOYAz1fVs
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetStdHandle
GetCommandLineA
FindFirstFileA
FindNextFileA
CloseHandle
ConnectNamedPipe
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
CreateNamedPipeA
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
WriteFile
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
MultiByteToWideChar
SetLastError
SetFilePointerEx
WriteConsoleW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
GetACP
IsValidCodePage
GetOEMCP
GetCPInfo
CreateFileW
GetStringTypeW
ExitProcess
GetModuleHandleExW
FlushFileBuffers
RtlUnwindEx
Qruncore
RJVQa11Y
YhrFH91
ZARSY62
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ