Qruncore
RJVQa11Y
YhrFH91
ZARSY62
Overview
overview
10Static
static
Document.lnk
windows7-x64
3Document.lnk
windows10-2004-x64
3maidservan...es.dll
windows7-x64
10maidservan...es.dll
windows10-2004-x64
10maidservan...er.cmd
windows7-x64
1maidservan...er.cmd
windows10-2004-x64
1maidservan...ly.bat
windows7-x64
1maidservan...ly.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Document.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Document.lnk
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
maidservant/fungicides.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
maidservant/fungicides.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
maidservant/insurer.cmd
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
maidservant/insurer.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
maidservant/propitiously.bat
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
maidservant/propitiously.bat
Resource
win10v2004-20220901-en
Target
Document_1822.iso
Size
980KB
MD5
b97e7eba769336e864f16114179ab197
SHA1
0cae500c2fd97190aa53b0d524f7a69fae96af90
SHA256
9f8a878f09fe670c743eef7609473f6b520c77168297858eeb0f817aa6c73182
SHA512
5fda2d06893ceceb1ac168949e548ebff84bfede3c23bb93c211294d9e29a1aa4273a2ecf29946651d65b1a09386b634dd206a47795eeb5401a44f953cdf2600
SSDEEP
24576:cFH+atTmiSo+fdgOukrK+RASbUtQLItq+Lf:cFH+aJmp1rMSItmIw6
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetStdHandle
GetCommandLineA
FindFirstFileA
FindNextFileA
CloseHandle
ConnectNamedPipe
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
CreateNamedPipeA
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
WriteFile
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
MultiByteToWideChar
SetLastError
SetFilePointerEx
WriteConsoleW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
GetACP
IsValidCodePage
GetOEMCP
GetCPInfo
CreateFileW
GetStringTypeW
ExitProcess
GetModuleHandleExW
FlushFileBuffers
RtlUnwindEx
Qruncore
RJVQa11Y
YhrFH91
ZARSY62
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ