Qruncore
RJVQa11Y
YhrFH91
ZARSY62
Static task
static1
Behavioral task
behavioral1
Sample
LDYwFaCKXIhkuX.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
LDYwFaCKXIhkuX.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
pBLiwECeuZiHFL.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
pBLiwECeuZiHFL.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
required documents.lnk
Resource
win7-20220901-en
Target
20221102_ta580.zip
Size
723KB
MD5
937e2e02cb5d22ebd0eb4de8d899eb31
SHA1
bad3dc73bcac34a4f28b86900ca29eb9952e4d54
SHA256
a6a48f8c18172cd0acafce22a39fdc65a720aad346050a7ee1b20cd6a13bd3f8
SHA512
c75a10fe3abacceb124e750d07a5985129927cbeb026b73ca2bc869b9ad86f3d27b2f678649fcf6a6e46b4feedad05b9dfdea18bb69b4574720052f418e42fc9
SSDEEP
12288:mzgL3CrGdPs8Lq2qere2vdnJjxUGvl3MfAArwie3jaosLPhrLNc8YLf3i:myC8jLdrZ1nJjxUA9W5kie3jFsL5rLNr
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetStdHandle
GetCommandLineA
FindFirstFileA
FindNextFileA
CloseHandle
ConnectNamedPipe
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
CreateNamedPipeA
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
WriteFile
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
MultiByteToWideChar
SetLastError
SetFilePointerEx
WriteConsoleW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
GetACP
IsValidCodePage
GetOEMCP
GetCPInfo
CreateFileW
GetStringTypeW
ExitProcess
GetModuleHandleExW
FlushFileBuffers
RtlUnwindEx
Qruncore
RJVQa11Y
YhrFH91
ZARSY62
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ