RemovePointOriginal@12
KillFolderA@12
RtlRectExW@8
ModifyStateNew@16
GenerateFolderPathOld@4
RtlExpression@4
FreeValue@12
IsMutantOld@12K\
Static task
static1
Behavioral task
behavioral1
Sample
8426d81c4d7b77e939c52be21f82483076caf64e637e65371fbc6af5e907f0ac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8426d81c4d7b77e939c52be21f82483076caf64e637e65371fbc6af5e907f0ac.exe
Resource
win10v2004-20220812-en
Target
8426d81c4d7b77e939c52be21f82483076caf64e637e65371fbc6af5e907f0ac
Size
205KB
MD5
5954e79e1eb7837ad21a7321efeb786a
SHA1
1e389fb1ef2c048c3423f17d6f70585b591ae931
SHA256
8426d81c4d7b77e939c52be21f82483076caf64e637e65371fbc6af5e907f0ac
SHA512
29cb646f9839f3ae734145762f5e1751d8a20700a63e1a97ab929f6e11869602a445227dcaf8ef6ca0238b60019c6a6a7fef77e015f1c6846cd2eb0ae76574fa
SSDEEP
6144:7uB8LoEMTm4e6igXe35YaXNZr2G2/pGGUX:7s8LfX4pRe7X3qG2hG
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RemovePointOriginal@12
KillFolderA@12
RtlRectExW@8
ModifyStateNew@16
GenerateFolderPathOld@4
RtlExpression@4
FreeValue@12
IsMutantOld@12K\
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ