Startup
e
iep
l
r
Static task
static1
Behavioral task
behavioral1
Sample
cece6d7611f23d3eb026ded8fa19e02e1fe11f8e4452121d1e0555424be8e060.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cece6d7611f23d3eb026ded8fa19e02e1fe11f8e4452121d1e0555424be8e060.dll
Resource
win10v2004-20220812-en
Target
cece6d7611f23d3eb026ded8fa19e02e1fe11f8e4452121d1e0555424be8e060
Size
40KB
MD5
93d33c32ba906642f926a48909bc216d
SHA1
68488b17fc4f32167bfca857c673180c5690ea11
SHA256
cece6d7611f23d3eb026ded8fa19e02e1fe11f8e4452121d1e0555424be8e060
SHA512
9d581e8f7cf606bc32314fb6848088897c9346ab7a2c07ab8db5914ee514daddf46e595794a12ed09843fc6d619447980247a370afa449170622b980ca1ad4ee
SSDEEP
768:Miec0MMZig5cPRjspZV6xzJsdwjEfb+T5Hgs50e:MSMZig5URjspStowjED+lAs6
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
UrlEscapeW
wnsprintfW
StrToIntW
PathFileExistsW
StrRStrIW
StrStrIW
StrStrIA
getnameinfo
inet_addr
DnsQuery_W
DnsRecordListFree
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenW
HttpQueryInfoW
lstrcpynA
CreateFileW
GetFileSize
ReadFile
WriteFile
CloseHandle
GetSystemWindowsDirectoryW
GetVolumeInformationW
lstrlenW
lstrcpynW
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatW
WideCharToMultiByte
lstrcatA
SetFilePointer
SetEndOfFile
lstrcpyW
CreateEventW
lstrcmpiW
CreateThread
WaitForSingleObject
SetEvent
CreateProcessW
SuspendThread
TerminateThread
Sleep
GetModuleFileNameW
FreeLibraryAndExitThread
LoadLibraryW
OpenMutexW
GetTickCount
GetLastError
CreateMutexW
GetCurrentProcess
GetProcAddress
VirtualAlloc
VirtualFree
VirtualQuery
MultiByteToWideChar
MapViewOfFile
CreateFileMappingW
ResetEvent
GetSystemInfo
Process32NextW
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
GetVersionExW
DisableThreadLibraryCalls
ExitProcess
CreateWaitableTimerW
SetWaitableTimer
GetCurrentThread
GetFileTime
SetFileTime
lstrcmpW
MoveFileW
MoveFileExW
WaitForMultipleObjects
FindFirstFileW
FindNextFileW
FindClose
GetSystemTime
UnmapViewOfFile
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
CallNextHookEx
PostMessageW
SetWindowsHookExW
wsprintfW
CreateProcessAsUserW
RegQueryValueExW
RegCloseKey
SetNamedSecurityInfoW
ImpersonateLoggedOnUser
OpenProcessToken
RevertToSelf
RegSetValueExW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegFlushKey
RegQueryInfoKeyW
RegEnumValueW
RegCreateKeyExW
SHGetSpecialFolderPathW
SHGetFolderPathW
ord680
StringFromCLSID
CoTaskMemFree
CoCreateGuid
Startup
e
iep
l
r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ