GgylSz9dqY
PCO6WCH
PUpdate
WfNDup32
Static task
static1
Behavioral task
behavioral1
Sample
XAnbADuUedJlBE.bat
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
XAnbADuUedJlBE.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
project details.lnk
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
project details.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
uDzpJZuAIMIPqQ.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
uDzpJZuAIMIPqQ.dll
Resource
win10v2004-20220812-en
Target
221108-xr16naefaq_pw_infected.zip
Size
820KB
MD5
49141315838c872171204fc3e4b17a52
SHA1
c21f7283b60d506bcbee0546f21ac4cb4f47c3f1
SHA256
1abbd122b009686bc66012aa19b7fca739ee09c131049acb03424c2bcf58b72a
SHA512
6f74a6a2826bd16716095a6fb0480e8b256a3e783cfa80bccf3aed98a62d5f06897413ad01d57b36385c62a636b91135dad26c4f64595953738f5166d6c78cdf
SSDEEP
24576:CzpfxeBrtyM0BRZEr1aH/e6mHqc952iZ+Rqnxd:Apfxc4lB/Er1aHm6mKcSomqxd
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetStdHandle
GetCurrentDirectoryA
CreateFileA
GetFileInformationByHandle
ReadFile
CloseHandle
GetLastError
WaitForSingleObject
GetCurrentThreadId
VirtualAlloc
GetTempPathA
CallNamedPipeA
GetCurrentActCtx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GgylSz9dqY
PCO6WCH
PUpdate
WfNDup32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ