AHeartbeat
ChConvertFromHex
DestroyWindow
FIsSpaceW
FlushState
PSTCreateTypeSubType_NoUI
Sync
Static task
static1
Behavioral task
behavioral1
Sample
ced361788c1d3fa67448439e048fbc83b19078e60eb470c683f18e511d23dc94.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ced361788c1d3fa67448439e048fbc83b19078e60eb470c683f18e511d23dc94.exe
Resource
win10v2004-20220812-en
Target
ced361788c1d3fa67448439e048fbc83b19078e60eb470c683f18e511d23dc94
Size
177KB
MD5
8dd05bce6614a306fe510b474e742a39
SHA1
a78abfa2ad9c246a5553923c4b31b2f93ed6d39a
SHA256
ced361788c1d3fa67448439e048fbc83b19078e60eb470c683f18e511d23dc94
SHA512
e09fd5ce108c6147cf42a4d3dbd76c91c1980ed1612c3c5bf4d2596fbd2a2e3c7e2a5563c8ef0e0fcd0d7450a2dab07c5fb533fe0a0b4e5c76526376bccfe7c1
SSDEEP
3072:Tr5dwBXo96wDkG7QXQmzDl2EHzxtqm+eLsYV6yNNEk8m0XK84zsbR2UmI:pdw1ogwQX/BNf+eLHDb8mEsso
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MessageBoxW
IsWindow
SHGetSpecialFolderLocation
SHCreateDirectoryExW
CommandLineToArgvW
ExitProcess
FindFirstFileW
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
lstrlenW
InterlockedExchange
_cexit
_controlfp
_exit
_initterm
_ismbblead
_wcsdup
_wcslwr
exit
free
memset
printf
wcsstr
wprintf
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
_XcptFilter
__getmainargs
PolyDraw
ArcTo
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AHeartbeat
ChConvertFromHex
DestroyWindow
FIsSpaceW
FlushState
PSTCreateTypeSubType_NoUI
Sync
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ