??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
?GetNormalizedPathImpl@detail@@YGHABU?$AvgMutableStringRefBase@_W$0A@@@PB_WIPAVIPathTreeTableRoot@1@_N33@Z
Static task
static1
Behavioral task
behavioral1
Sample
4ce98682491a4684e244d870f0d04131dcf4c214c2ff03b83e5b8950a8c1b0cf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4ce98682491a4684e244d870f0d04131dcf4c214c2ff03b83e5b8950a8c1b0cf.exe
Resource
win10v2004-20220812-en
Target
4ce98682491a4684e244d870f0d04131dcf4c214c2ff03b83e5b8950a8c1b0cf
Size
507KB
MD5
351b88fa2455350a289dbe2635452835
SHA1
a0fe2d213cdccff644b8041dd045c4fe44799e96
SHA256
4ce98682491a4684e244d870f0d04131dcf4c214c2ff03b83e5b8950a8c1b0cf
SHA512
dde70877db600ace95bb6b003a91e08757bcfcaa26d8ac8f158a009361396f40a99d997591b59dd8f6dfb9e700c9f1ba59469fc01c0150f5401e1bdc2a0ce887
SSDEEP
12288:XK1GdXTfY7uTtULFPMdV4FgJ8ZHr+os1M09rz9JNGr1oJNQPHP:XK1GhY7dJkdV4KCHiTHP9J4aTy
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlReleasePebLock
RtlAcquirePebLock
ZwAllocateVirtualMemory
ZwFreeVirtualMemory
ZwTerminateProcess
ZwSetEvent
ZwCancelIoFile
ZwWriteFile
ZwOpenFile
ZwWaitForSingleObject
RtlFreeUnicodeString
ZwSetInformationFile
ZwReadFile
ZwFsControlFile
RtlCreateUnicodeString
RtlAllocateHeap
RtlReAllocateHeap
RtlFreeHeap
RtlNtStatusToDosError
ZwQueryVirtualMemory
RtlAddVectoredExceptionHandler
RtlRemoveVectoredExceptionHandler
ZwWaitForMultipleObjects
ZwDuplicateObject
ZwClose
RtlInitUnicodeString
ZwCreateEvent
RtlCreateUserProcess
ZwResumeThread
_allmul
memset
_chkstk
_aulldiv
memcpy
memmove
??1AvgBasWinRegistryHandle@@QAE@XZ
??0AvgBasWinRegistryHandle@@QAE@W4AvgBasWinRegistryRootType@@@Z
?AttachTo@AvgBasSharedLibraryLoader@@QAGHPBDPCRAX@Z
?Unload@AvgBasSharedLibraryLoader@@UAGXXZ
?Load@AvgBasSharedLibraryLoader@@QAGHPB_W@Z
??1AvgBasSharedLibraryLoader@@UAE@XZ
??0AvgBasSharedLibraryLoader@@QAE@PB_W@Z
?AvgConvertString2Number@@YGHAAGPB_WIHPAPB_W@Z
?GetMaxPathLength@AvgEnvironment@@YGHAAIPB_W@Z
?GetSpecialFolder@AvgEnvironment@@YGHW4SpecialFolder@1@AAV?$IAvgString@_W$0A@@@@Z
?Sleep@AvgBasThread@@SGHH@Z
?AvgKernel32ForceInitialize@@YGXXZ
?UnloadSharedLibraries@AvgBasObjectFactoryImpl@detail@@QAGX_N@Z
?GetAvgObject@AvgBasObjectFactoryImpl@detail@@QAGHABU_AvgGuid@@PAPAX@Z
?SetProgramPath@AvgBasObjectFactoryImpl@detail@@QAGHPB_W@Z
?Initialize@AvgBasObjectFactoryImpl@detail@@QAGHPBUAvgBasObjectFactoryMapping@@I@Z
??1AvgBasObjectFactoryImpl@detail@@QAE@XZ
??0AvgBasObjectFactoryImpl@detail@@QAE@XZ
?Wait@AvgBasEvent@@QAGHH@Z
?Create@AvgBasEvent@@QAGHW4ResetType@1@_N@Z
?AvgCreateErrorCodeFromWin32@@YGHW4_AvgErrorCodeSeverity@@K@Z
?GetHandle@AvgBasWaitable@@IBGPAXXZ
?AvgCopyString@@YGHPA_WIPB_WI@Z
?AvgBufferXor@@YGXPAEPBEI1I_J@Z
?GetFullPath@AvgBasPath@@YGHAAU_AVG_UTF16CHAR_STR@@PB_WIPAI@Z
?GetTempDirPath@AvgBasPath@@YGHAAU_AVG_UTF16CHAR_STR@@PAI@Z
?GetDirectoryPathFromFilenamePath@AvgBasPath@@YGHAAU_AVG_UTF16CHAR_STR@@PB_WIPAI@Z
?IsPathRooted@AvgBasPath@@YG_NPB_WI@Z
??1AvgSpinLockLocker@@QAE@XZ
??0AvgSpinLockLocker@@QAE@PAUAvgSpinLock@@_N@Z
?AvgDestroySysMini@@YGXXZ
?AvgInitializeSysMini@@YGHXZ
?OpenKeyIfExists@AvgBasWinRegistryHandle@@QAGHABU?$AvgStringRefBase@_W$0A@@@@Z
?DestroyEnvironment@AvgEnvironment@@YGXXZ
?GetValue@AvgUtf16CharHeapBuffer@@QBGPB_WXZ
?GetSize@AvgUtf16CharHeapBuffer@@QBGIXZ
??1AvgUtf16CharHeapBuffer@@QAE@XZ
??0AvgUtf16CharHeapBuffer@@QAE@XZ
?AvgBasGetStackFrameModulePath@@YGHAAV?$IAvgString@_W$0A@@@ABUAvgBasStackFrameX86@@@Z
?AvgCompareStringNoCase@@YGHW4AvgCodePage@@PB_W1II@Z
?AvgConvertString2Number@@YGHAAHPB_WIHPAPB_W@Z
?AvgConvertLocalTimeToSystemTime@@YGHAAUAvgTimeStruct@@@Z
?Set@AvgBasEvent@@QAGHXZ
?AvgCreateErrorCodeFromWin32@@YGHK@Z
?GetForward@AvgBasWaitable@@IBGPAV1@XZ
?GetResourceType@AvgBasWaitable@@IBG?AW4AvgBasWaitableResourceType@@XZ
?Destroy@AvgBasWaitable@@UAGHXZ
?GetThreadExitCode@AvgBasThread@@QAGHAAH@Z
?StopThread@AvgBasThread@@QAGHH@Z
?StartThread@AvgBasThread@@QAGHW4AvgPriority@@PAVAvgSecurityCtx@@V?$AvgFlags@W4ThreadFlag@AvgBasThread@@@@PBD@Z
?Initialize@AvgBasThread@@QAGHPAVAvgBasEvent@@@Z
?Cleanup@AvgBasThread@@MAGXXZ
?Reset@AvgBasEvent@@QAGHXZ
?AvgWinZwOpenFile@@YGHPB_WPAPAXKPAU_IO_STATUS_BLOCK@@KK@Z
?Release@AvgBasCriticalSection@@QAGHXZ
?Acquire@AvgBasCriticalSection@@QAGHXZ
?Create@AvgBasCriticalSection@@QAGHXZ
??1AvgBasCriticalSection@@QAE@XZ
??0AvgBasCriticalSection@@QAE@XZ
?Assign@AvgUtf16CharHeapBuffer@@QAGHPB_WI@Z
?AvgGetTimestamp@@YGKXZ
?AvgKernel32IsFnLoaded_UnhandledExceptionFilter@@YG_NXZ
?AvgKernel32_SetUnhandledExceptionFilter@@YGP6GJPAU_EXCEPTION_POINTERS@@@ZP6GJ0@Z@Z
?AvgWinIsProcessBeingDebugged@@YG_NXZ
?AvgKernel32_UnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z
?GetPathRootLength@AvgBasPath@@YGIPB_WI@Z
?Append@AvgUtf16CharHeapBuffer@@QAGHPB_WI@Z
?Append@AvgUtf16CharHeapBuffer@@QAGH_W@Z
??AAvgUtf16CharHeapBuffer@@QAGAA_WI@Z
?ReserveElements@AvgUtf16CharHeapBuffer@@QAGHI@Z
?GetDirectoryItem@AvgBasFs@@YGHAAVItem@1@PB_W@Z
?GetName@Item@AvgBasFs@@QBGPB_WXZ
??1Item@AvgBasFs@@QAE@XZ
??0Item@AvgBasFs@@QAE@XZ
?FreeResource@AvgBasWaitable@@IAGHXZ
?GetCurrentModuleHandle@AvgProcess@@YGPAXXZ
?IsWow64ViewModeSupported@AvgBasWinRegistryHandle@@SG_NXZ
?SetViewMode@AvgBasWinRegistryHandle@@QAGHV?$AvgFlags@W4AvgBasWinRegistryViewModeValues@@@@@Z
?GetStringValue@AvgBasWinRegistryHandle@@QAGHAAV?$IAvgString@_W$0A@@@ABU?$AvgStringRefBase@_W$0A@@@@Z
?CloseKey@AvgBasWinRegistryHandle@@QAGXXZ
?AvgGenerateRandomBuffer@@YGXPAEI@Z
?AvgCompareString@@YGHPB_W0II@Z
?AvgGetSystemTime@@YGHAA_K@Z
?AvgFormatStringV@@YGHW4AvgCodePage@@PA_WIPB_WPAIPAD@Z
?DirectoryExists@AvgBasFs@@YGHPB_W@Z
??0AvgTimeStruct@@QAE@XZ
?AvgMemXor@@YGXPAEPBEI@Z
?AvgGetStringSizeInElements@@YGIPB_W@Z
?AvgConvertAvgTimeToStruct@@YGHAAUAvgTimeStruct@@_K@Z
?GetModuleDirectory@AvgModule@@YGHPAXAAU_AVG_UTF16CHAR_STR@@PAI@Z
?InitializeEnvironment@AvgEnvironment@@YGHXZ
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_CxxThrowException
_exit
_controlfp_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_cexit
__wgetmainargs
_amsg_exit
__CxxFrameHandler3
_onexit
_lock
__dllonexit
_unlock
swprintf_s
_set_invalid_parameter_handler
_invoke_watson
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
??_V@YAXPAX@Z
_configthreadlocale
InterlockedExchange
CreateEventW
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
CreateProcessW
WaitForMultipleObjects
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
SetUnhandledExceptionFilter
DecodePointer
EncodePointer
WaitForMultipleObjectsEx
CancelIo
DeviceIoControl
GetLastError
GetOverlappedResult
CreateFileW
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
?GetNormalizedPathImpl@detail@@YGHABU?$AvgMutableStringRefBase@_W$0A@@@PB_WIPAVIPathTreeTableRoot@1@_N33@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE