ATerminatePlay
AddColumn
MessageBoxInst
PSTGetData
Static task
static1
Behavioral task
behavioral1
Sample
a74625400ca33e292515cda33aab9e6a02afc930a262fb263e4a8d70f7b0d4eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a74625400ca33e292515cda33aab9e6a02afc930a262fb263e4a8d70f7b0d4eb.exe
Resource
win10v2004-20220812-en
Target
a74625400ca33e292515cda33aab9e6a02afc930a262fb263e4a8d70f7b0d4eb
Size
180KB
MD5
3b9eac66c9456065049147c2061518ce
SHA1
c9f3a09ac3cc723eac6f1e659d7b4df81c86e28f
SHA256
a74625400ca33e292515cda33aab9e6a02afc930a262fb263e4a8d70f7b0d4eb
SHA512
8622df0fdb94f6f6c510959ece542bba160d909774e5206223b1b09ec53c291956f8241f78a3724bd136b5419facf6acd56f918a4b9662fd8ebdcd06d876b7e5
SSDEEP
3072:Fi7ypYdSHUAo+33UnMIx+E8/n+peK9UAqNy/JgVYY+6yKLM+9ywZEgBMx0RSRxi2:M5W3kMIx+eP/WtEZ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wcschr
towupper
towlower
time
swscanf
strstr
strrchr
strncmp
strncat
strchr
realloc
qsort
printf
memset
mbstowcs
malloc
ldexp
iswxdigit
iswspace
iswprint
iswalpha
iswalnum
isspace
isprint
getenv
ftell
fseek
frexp
free
fprintf
fgetws
fgets
feof
fclose
ctime
atoi
wcsncpy
_wgetenv
_wfopen
_wctime
_wcsupr
_wcsnicmp
_wcslwr
_wcsicoll
_wcsicmp
_wcsdup
_vsnwprintf
_vsnprintf
_time64
_strnicmp
_strlwr
_stricmp
_spawnlp
_snwprintf
_snprintf
_purecall
_onexit
_memicmp
_lseeki64
_lock
_itow
_itoa
_ismbcsymbol
_ismbclower
_isatty
_initterm
_fileno
_errno
_eof
_amsg_exit
__threadhandle
__pioinfo
__doserrno
__dllonexit
__badioinfo
__CxxFrameHandler
_XcptFilter
wcstoul
wctomb
_wsetlocale
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
OpenProcessToken
LsaAddAccountRights
InitializeSecurityDescriptor
InitializeAcl
GetUserNameW
GetLengthSid
FreeSid
CloseEventLog
CheckTokenMembership
AdjustTokenPrivileges
AddAccessAllowedAce
SetSecurityDescriptorRMControl
SHLoadNonloadedIconOverlayIdentifiers
SHGetFolderPathW
SHBindToParent
TerminateProcess
SystemTimeToFileTime
SwitchToFiber
SuspendThread
SleepEx
Sleep
SizeofResource
SetupComm
SetUnhandledExceptionFilter
SetThreadIdealProcessor
SetThreadContext
SetLastError
SetFilePointer
SetEvent
SetEnvironmentVariableA
SetCommTimeouts
SetCommState
SetCommMask
RtlUnwind
ResumeThread
ResetEvent
ReleaseSemaphore
ReadProcessMemory
ReadFile
RaiseException
QueueUserAPC
QueryPerformanceCounter
OutputDebugStringA
OpenProcess
OpenFileMappingW
OpenEventW
MapViewOfFile
TerminateThread
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
IsBadWritePtr
IsBadReadPtr
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapCreate
HeapAlloc
GetVersionExA
GetTickCount
GetThreadTimes
GetThreadSelectorEntry
GetThreadPriority
GetThreadContext
GetTempPathA
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryA
GetProcessTimes
GetProcessHeap
GetProcAddress
GetPriorityClass
GetOverlappedResult
GetModuleHandleA
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQueryEx
WaitCommEvent
WaitForDebugEvent
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WriteFile
WriteProcessMemory
lstrcmpiW
LocalFree
CreateFileMappingA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileTime
ClearCommError
CloseHandle
ConnectNamedPipe
ContinueDebugEvent
ConvertThreadToFiber
CreateDirectoryW
CreateEventA
CreateFiber
CreateFileA
CreateNamedPipeA
CreateSemaphoreA
CreateThread
DebugActiveProcess
DebugBreak
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FreeLibrary
GetCommMask
GetCommModemStatus
GetCommTimeouts
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileSize
GetFileSizeEx
ATerminatePlay
AddColumn
MessageBoxInst
PSTGetData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ