?Detoured@@YGPAUHINSTANCE__@@XZ
start
Static task
static1
Behavioral task
behavioral1
Sample
af7bb73f3f0e9f456019763b7fc7df26a9052221fc3bf4d5d7a3fd64fbc73a3f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af7bb73f3f0e9f456019763b7fc7df26a9052221fc3bf4d5d7a3fd64fbc73a3f.dll
Resource
win10v2004-20220812-en
Target
af7bb73f3f0e9f456019763b7fc7df26a9052221fc3bf4d5d7a3fd64fbc73a3f
Size
84KB
MD5
53cfcc588499820a3c35ae2ce7467ea4
SHA1
f450b110b875f582be9a233692247bb8957b4726
SHA256
af7bb73f3f0e9f456019763b7fc7df26a9052221fc3bf4d5d7a3fd64fbc73a3f
SHA512
f51d6fa8d841b2795ad39b5677f928ba6d70d2b5df83d6a36a62ce8d92747b36517b190b869d50b84f5c3aab8e4781b70a67aa000e9a6966fe4f0dcea5c41a83
SSDEEP
1536:b3iD2Cmcvp8KhWwqi/q3Vls1ikoV47MwUJhuHvk:QHOyWpi/AVOBMwUJhuHc
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
OpenProcess
lstrlenA
GetExitCodeThread
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
SetErrorMode
CreateThread
GetCommandLineA
GetLocaleInfoA
UnmapViewOfFile
VirtualAlloc
MapViewOfFile
CreateFileMappingA
ReadFile
SetFilePointer
GetFileSize
CreateFileA
GetPrivateProfileStringA
GetLastError
GetLocalTime
VirtualFree
lstrcmpA
lstrcpynA
GetCurrentThread
WriteFile
GetCurrentProcess
TerminateProcess
CreateMutexA
GetTickCount
GetVersionExA
CompareStringW
FlushFileBuffers
CreateFileW
lstrlenW
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
GetProcAddress
CreateRemoteThread
WaitForSingleObject
VirtualFreeEx
Sleep
GetModuleFileNameA
OpenMutexA
lstrcpyA
CloseHandle
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
HeapReAlloc
HeapSize
LoadLibraryW
SetEnvironmentVariableA
IsValidCodePage
GetOEMCP
GetACP
VirtualQuery
SetLastError
VirtualProtect
InterlockedCompareExchange
GetCurrentThreadId
ResumeThread
FlushInstructionCache
GetThreadContext
SetThreadContext
SuspendThread
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
DecodePointer
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent
WideCharToMultiByte
GetTimeZoneInformation
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
CharLowerA
wsprintfW
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
htons
recv
closesocket
WSAStartup
ntohs
send
connect
socket
StrStrIA
PathRemoveFileSpecA
?Detoured@@YGPAUHINSTANCE__@@XZ
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ