EscapeCall
Main
Static task
static1
Behavioral task
behavioral1
Sample
RunDLL-1.bat
Resource
win10-20220901-en
Behavioral task
behavioral2
Sample
RunDLL-1.bat
Resource
win7-20221111-en
Behavioral task
behavioral3
Sample
Still.dll
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
Still.dll
Resource
win7-20221111-en
Target
Malware.zip
Size
164KB
MD5
c302f7dcd1b5ab7b8248c3be1f60bd31
SHA1
dfd528fdb964c284d8bf7c4dcb49f2570488b207
SHA256
d90b2a3215de3f3870d27a0948614304f70e7f2c925d3e5d5d6fb2ab06204ecf
SHA512
392570ec27cd30c3759fa7729acb1d284c30c9fa29d9570d5aee3dac307833c8deeafd74f0536575ab5f74f3986e13ac09f20a3c8682d97ba3371a2aa64f7a8a
SSDEEP
3072:4Ybp0SXr2SNc63of3m6zos5iPqUsZJX3cMfqVi26zo1vpk/ws:Xb2SNc63ofW6YEZsMfoi26zqRW
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
RtlUnwindEx
RtlVirtualUnwind
RtlPcToFileHeader
RtlCaptureContext
RtlLookupFunctionEntry
Polyline
SetBkColor
CreateFontIndirectW
GetStockObject
IsProcessorFeaturePresent
SetLastError
GetFullPathNameW
GetLastError
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
SetFilePointerEx
CloseHandle
GetTickCount
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetModuleHandleA
GetProcAddress
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetStdHandle
GetConsoleMode
WaitForSingleObject
WriteConsoleW
GetCurrentDirectoryW
AcquireSRWLockExclusive
GetCurrentProcess
ReleaseMutex
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetCurrentThread
GetEnvironmentVariableW
GetModuleHandleW
FormatMessageW
ExitProcess
AcquireSRWLockShared
ReleaseSRWLockShared
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedFlushSList
EncodePointer
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetFileType
GetStringTypeW
HeapSize
EscapeCall
Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ