RemovePointOriginal@12
KillFolderA@12
RtlRectExW@8
ModifyStateNew@16
GenerateFolderPathOld@4
RtlExpression@4
FreeValue@12
IsMutantOld@12K\
Static task
static1
Behavioral task
behavioral1
Sample
86cebee7cfdcd63f3d27f40ab018641f87454b14fa00d679fce0089b6e5b620a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86cebee7cfdcd63f3d27f40ab018641f87454b14fa00d679fce0089b6e5b620a.exe
Resource
win10v2004-20220812-en
Target
86cebee7cfdcd63f3d27f40ab018641f87454b14fa00d679fce0089b6e5b620a
Size
205KB
MD5
cd682932f64ee41612c0d6d45a893657
SHA1
853ce43f12c795377e037e7890af140dfae0c9bf
SHA256
86cebee7cfdcd63f3d27f40ab018641f87454b14fa00d679fce0089b6e5b620a
SHA512
36560e0a7f6c96c69617fb88a932393db11473b0526b0ccc6744305e4cb29c082adcecafc1ae2085a21199c9139ed9abd29b186fb12368c90d8158829bf2a562
SSDEEP
6144:Djbzgq4aGmDnazX3zyNSOD3lMWj3GGvBwQD4:DnEHa/uODqWbGw
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RemovePointOriginal@12
KillFolderA@12
RtlRectExW@8
ModifyStateNew@16
GenerateFolderPathOld@4
RtlExpression@4
FreeValue@12
IsMutantOld@12K\
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ