ButMay
TheASyntaxOptionalThe
ValidStarting
Static task
static1
Behavioral task
behavioral1
Sample
e2409d29c694e0c667bb5d2c1c8579b81892c4826b81618f6ebe517194e000cd.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2409d29c694e0c667bb5d2c1c8579b81892c4826b81618f6ebe517194e000cd.dll
Resource
win10v2004-20221111-en
Target
e2409d29c694e0c667bb5d2c1c8579b81892c4826b81618f6ebe517194e000cd
Size
132KB
MD5
3ff84ea2d67aca073ef3f64c3408f720
SHA1
9966ea75b41099f3d4146860f9e4650c7a10d939
SHA256
e2409d29c694e0c667bb5d2c1c8579b81892c4826b81618f6ebe517194e000cd
SHA512
ebcc5dce941d035d84e28670511c19f59921e341ec7efe07e0dab244c31f9162dce00f6c8711afb2a308ab583cb413f7155c9d1107f3a7dba1560de8b2cf228a
SSDEEP
3072:FuRPSO37vr+maHmCHv020AQZALiwnP6EQYOiM:tO3ubyAQZAmwn/
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DeleteFileW
SetFilePointer
RemoveDirectoryA
GetConsoleTitleA
lstrcmpA
VirtualAlloc
EndDialog
AdjustWindowRect
IsWindowEnabled
ShowOwnedPopups
SetFileSecurityW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
fprintf
printf
fwprintf
wcscat
exit
wcslen
wcscpy
wcscmp
fgets
ButMay
TheASyntaxOptionalThe
ValidStarting
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ