AmdPowerXpressRequestHighPerformance
AsyncTrace
DllCanUnloadNow
DllGetActivationFactory
NvOptimusEnablement
free
malloc
realloc
Static task
static1
Behavioral task
behavioral1
Sample
afce25a93d882dc76c969dac7af208d21b82629cad3aff576311f26aad7a6047.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afce25a93d882dc76c969dac7af208d21b82629cad3aff576311f26aad7a6047.exe
Resource
win10v2004-20220812-en
Target
afce25a93d882dc76c969dac7af208d21b82629cad3aff576311f26aad7a6047
Size
8.5MB
MD5
b141b6e46297989c855ce31305660e40
SHA1
f93c8a264b1cbc7fd43983d97e2f72de4c82d4b8
SHA256
afce25a93d882dc76c969dac7af208d21b82629cad3aff576311f26aad7a6047
SHA512
d7115dabd0e3bf325f1bc6ced70d362b40f5bbbdb6941b99eaa740dfb094eaf4c2bd5118330b1e86fdaa4e2c97e237157eb857c19b43e41561f96853fef8ab5d
SSDEEP
98304:pqeWAWkEF2b9fj9LKNuJSukemm2AtVnQ3Oa2bNnie13:pVWfA979Lu8k8zvNPp
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
ord344
InitCommonControlsEx
ord345
CryptUnprotectData
MoveFileW
MultiByteToWideChar
GetFileAttributesExW
AddVectoredExceptionHandler
GetCurrentProcessId
ExitProcess
GetStartupInfoW
GetProcAddress
LoadLibraryA
LoadLibraryW
K32EnumProcessModules
CreateDirectoryW
CreateMutexW
OpenMutexW
SwitchToThread
GetCurrentThread
GetCurrentThreadId
GetSystemTime
GetTickCount64
SystemTimeToFileTime
GetPrivateProfileIntW
WriteFile
GetTickCount
VerSetConditionMask
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
VirtualProtect
VerifyVersionInfoW
RtlAddFunctionTable
GetModuleFileNameA
FindClose
FindFirstFileW
FindNextFileW
GetFileSizeEx
GetPrivateProfileStringW
WritePrivateProfileStringW
GetFullPathNameW
GetEnvironmentVariableW
SetEnvironmentVariableW
SetCurrentDirectoryW
SetEvent
WaitForSingleObject
CreateEventW
GetExitCodeProcess
OpenProcess
GetSystemDirectoryW
IsProcessInJob
GetLastError
AssignProcessToJobObject
SetInformationJobObject
SetDllDirectoryW
CreateRemoteThread
CopyFileW
CreateProcessW
VirtualAllocEx
ReadProcessMemory
WriteProcessMemory
K32GetModuleFileNameExW
K32GetModuleInformation
ReadFile
GetOverlappedResult
EncodePointer
DecodePointer
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
FreeLibrary
LoadResource
LockResource
SizeofResource
FindResourceW
MulDiv
CreateActCtxW
ActivateActCtx
SetFilePointerEx
CloseHandle
GetFileAttributesW
DeleteFileW
RtlUnwind
ReadConsoleA
SetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
CreateFileW
GetCommandLineW
TerminateProcess
HeapSize
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapAlloc
LocalFree
GetModuleHandleW
GetModuleFileNameW
MapViewOfFile
GetExitCodeThread
GetCurrentProcess
IsDebuggerPresent
CreateFileMappingW
GetProcessId
Sleep
CreateJobObjectW
HeapFree
SetConsoleCtrlHandler
GetConsoleCP
ReadConsoleW
GetConsoleMode
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
ExitThread
WriteConsoleW
GetModuleHandleExW
GetFileType
GetStdHandle
RtlUnwindEx
RtlPcToFileHeader
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
VirtualFree
VirtualAlloc
GetVersionExW
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SetEndOfFile
SignalObjectAndWait
CreateTimerQueue
LoadLibraryExA
VirtualQuery
GetSystemInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
InitializeSListHead
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
MoveFileExW
FormatMessageW
WideCharToMultiByte
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
RaiseException
CompareStringOrdinal
InitOnceExecuteOnce
InitializeSRWLock
GlobalUnlock
GlobalLock
GlobalSize
CreateEventExW
WaitForSingleObjectEx
DuplicateHandle
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
ResetEvent
WaitForMultipleObjects
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
CreateSemaphoreW
CreateThread
VirtualQueryEx
GetProcessTimes
GetSystemTimeAsFileTime
UnregisterWaitEx
UnregisterWait
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeW
ReleaseMutex
RegisterWaitForSingleObject
InitializeCriticalSectionEx
SleepEx
QueryPerformanceFrequency
QueryPerformanceCounter
ExpandEnvironmentStringsA
SetLastError
FormatMessageA
SetFilePointer
GetStringTypeW
GetNativeSystemInfo
TryEnterCriticalSection
GetCurrentDirectoryW
FindFirstFileExW
GetFileInformationByHandle
RemoveDirectoryW
AreFileApisANSI
RegisterWindowMessageW
CreateWindowExW
MessageBoxA
RegisterClassExW
MsgWaitForMultipleObjects
SendMessageW
DefWindowProcW
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
PeekMessageW
AllowSetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowTextW
GetSysColor
GetSysColorBrush
GetWindowLongW
SetWindowLongW
GetDesktopWindow
FindWindowExW
LoadCursorW
LoadIconW
MonitorFromPoint
FindWindowW
DispatchMessageW
GetProcessWindowStation
GetUserObjectInformationW
TranslateMessage
MessageBoxW
SetTimer
SetBkMode
GetDeviceCaps
CreateFontIndirectW
SetTextColor
RegGetValueW
RegisterEventSourceW
DeregisterEventSource
GetTokenInformation
OpenProcessToken
RegSetKeyValueW
RegDeleteKeyW
ReportEventW
SHGetKnownFolderPath
SHBindToParent
CommandLineToArgvW
ShellExecuteW
SHParseDisplayName
ord709
SHCreateItemFromParsingName
SetCurrentProcessExplicitAppUserModelID
SHSetLocalizedName
htons
ntohs
setsockopt
WSAIoctl
WSAStartup
WSACleanup
getaddrinfo
getsockopt
ioctlsocket
getsockname
shutdown
getpeername
WSAGetLastError
connect
getnameinfo
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
socket
freeaddrinfo
RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
StrStrIW
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
RpcStringFreeA
UuidToStringA
D3D11CreateDevice
InternetCrackUrlW
InternetConnectW
InternetReadFile
InternetOpenW
InternetCloseHandle
InternetQueryDataAvailable
InternetSetOptionW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
BCryptGenRandom
SysFreeString
AmdPowerXpressRequestHighPerformance
AsyncTrace
DllCanUnloadNow
DllGetActivationFactory
NvOptimusEnablement
free
malloc
realloc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ