OHSPOR
TPSJ
Static task
static1
Behavioral task
behavioral1
Sample
bc53e7ffb8fb67abedbe5e52d771047fb80a73c51f5528029d37adf1c04e3e43.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc53e7ffb8fb67abedbe5e52d771047fb80a73c51f5528029d37adf1c04e3e43.dll
Resource
win10v2004-20221111-en
Target
bc53e7ffb8fb67abedbe5e52d771047fb80a73c51f5528029d37adf1c04e3e43
Size
72KB
MD5
50165e2ec2b1974a6467e46a2b9d9bbe
SHA1
c07b6c145eef52cefd56d1e1c940b7a7aa8e6780
SHA256
bc53e7ffb8fb67abedbe5e52d771047fb80a73c51f5528029d37adf1c04e3e43
SHA512
64ca404849c2c208ebddf3326712d2bddcffbe1efe6f3c2234ee2bc92e068752893454039dab57fdf3716b4fa11ee4ac44dbc9d16a94fd8605d5e27c7bfcba7a
SSDEEP
1536:k92beO2x5A/D/0L/1viEDRP0eHLDZROy:BQ5IDkQEDrPO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
GetCommandLineW
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
InterlockedExchange
VirtualQuery
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
OHSPOR
TPSJ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ