Knwkbqrbjjr
Gimjrsqga
WriteDlnwnjmhdju
Static task
static1
Behavioral task
behavioral1
Sample
fe8f03d80dbb56466068ef22e00eb2753f7e3af841e09e6dcfd6f29369deac42.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe8f03d80dbb56466068ef22e00eb2753f7e3af841e09e6dcfd6f29369deac42.exe
Resource
win10v2004-20220812-en
Target
fe8f03d80dbb56466068ef22e00eb2753f7e3af841e09e6dcfd6f29369deac42
Size
100KB
MD5
194c4f72cc352f60fd7de519eeebb46b
SHA1
7526e2099c0db85df77fb011baed44d8b8c08f81
SHA256
fe8f03d80dbb56466068ef22e00eb2753f7e3af841e09e6dcfd6f29369deac42
SHA512
06719d0e7b638789fb680f096a0ccf7c1dae7840e59b5211b8999411433a993d174b79cb1489fbd9c8b7cb1df6cdff2ce6a62bf490372dbae9dc2357323ffbf5
SSDEEP
1536:rPEQbDVgdpJ69WN9xCn9qwFoPvUrUjRdRuzU/+HTQO8vSmh8:zZDVQJ8WrxCnVoPvUoj3RgieovS
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GlobalUnlock
WriteFileEx
WideCharToMultiByte
WriteProfileSectionA
Process32First
GetConsoleCommandHistoryLengthA
lstrlen
RegisterWaitForSingleObjectEx
AreFileApisANSI
lstrlen
FindNextChangeNotification
GetCommandLineA
GetStartupInfoA
ExitProcess
RtlAddAccessAllowedAceEx
ZwCreateFile
RtlSetSecurityObjectEx
ZwOpenObjectAuditAlarm
LdrAccessResource
RtlExtendedMagicDivide
NtPrivilegedServiceAuditAlarm
RtlUpcaseUnicodeToMultiByteN
isupper
ispunct
NtUnmapViewOfSection
NtWriteFile
DbgUiWaitStateChange
RtlCopySidAndAttributesArray
NtQueryDirectoryFile
NtQueryTimerResolution
ZwMakeTemporaryObject
Knwkbqrbjjr
Gimjrsqga
WriteDlnwnjmhdju
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ