AHeartbeat
ChConvertFromHex
DestroyWindow
FIsSpaceW
FlushState
PSTCreateTypeSubType_NoUI
Sync
Static task
static1
Behavioral task
behavioral1
Sample
c1b9b835bb727535bba71e1ebe857923b962b4176f055081e7083117c5c6d94e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c1b9b835bb727535bba71e1ebe857923b962b4176f055081e7083117c5c6d94e.exe
Resource
win10v2004-20220812-en
Target
c1b9b835bb727535bba71e1ebe857923b962b4176f055081e7083117c5c6d94e
Size
170KB
MD5
932899c0e55b333dab738cf3775730e3
SHA1
38b2583a310bf8dc17f83b7f3c9cb5f86151e2c5
SHA256
c1b9b835bb727535bba71e1ebe857923b962b4176f055081e7083117c5c6d94e
SHA512
bb2b64303abdde88310e05318cc211db930de8d00f8a91700a0b12314fb15b40ffecb0ff56e20fe42c9336acc6f37b0a60c510ded576cecd5cd77878fc1a1cbe
SSDEEP
3072:9TIkqffzyjcoWJOtpinr/xfjWPEV63r+WbmlecksyOcj9Dw+yz:mtGDpIpfiPk63rqe1syP9Q
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MessageBoxW
IsWindow
SHGetSpecialFolderLocation
SHCreateDirectoryExW
CommandLineToArgvW
ExitProcess
FindFirstFileW
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
lstrlenW
InterlockedExchange
_cexit
_controlfp
_exit
_initterm
_ismbblead
_wcsdup
_wcslwr
exit
free
memset
printf
wcsstr
wprintf
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
_XcptFilter
__getmainargs
PolyDraw
ArcTo
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AHeartbeat
ChConvertFromHex
DestroyWindow
FIsSpaceW
FlushState
PSTCreateTypeSubType_NoUI
Sync
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ