AStartUp
AddColumn
EndSession
HrEtreamSeekBegin
SetLayerPalette
Static task
static1
Behavioral task
behavioral1
Sample
a85f8fbfde535d8d9b668326e7f17d959253b9477342a612308ce465634724e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a85f8fbfde535d8d9b668326e7f17d959253b9477342a612308ce465634724e7.exe
Resource
win10v2004-20221111-en
Target
a85f8fbfde535d8d9b668326e7f17d959253b9477342a612308ce465634724e7
Size
174KB
MD5
75db3fd094d9980bb92be29915271237
SHA1
1be19d635c7994b11944b3ced37b5243cb9095b5
SHA256
a85f8fbfde535d8d9b668326e7f17d959253b9477342a612308ce465634724e7
SHA512
ca8f6bf2920d821c0d790e630aa2b4912c85e4909e2eccc1c6d29c20510bb6d754272d11bf6d3c703b5e140b700ccb1fc12781986ee15fb78d5aee363ed1c5f1
SSDEEP
3072:dXR094+bhC53Di36rkjZm/fDCjzWSLzEW860DyJ2xdRkXJDB8VER:+4+FCdi36oEfDCGkIvhyJ2KZDB8
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SHGetSpecialFolderLocation
SHCreateDirectoryExW
CommandLineToArgvW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ArcTo
PolyDraw
VirtualProtect
lstrlenW
VirtualFree
VirtualAlloc
ExitProcess
FindFirstFileW
FindNextFileW
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetModuleHandleA
GetProcAddress
InterlockedExchange
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
MessageBoxW
IsWindow
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_controlfp
_exit
_initterm
_ismbblead
_wcsdup
_wcslwr
exit
free
memset
printf
wcsstr
wprintf
AStartUp
AddColumn
EndSession
HrEtreamSeekBegin
SetLayerPalette
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ