DllMain
Reg
dllstart
Static task
static1
Behavioral task
behavioral1
Sample
2c41f943338e180561280cc544d5462de702db0816bc26c83ce64cf40523ecdb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2c41f943338e180561280cc544d5462de702db0816bc26c83ce64cf40523ecdb.exe
Resource
win10v2004-20230220-en
Target
2c41f943338e180561280cc544d5462de702db0816bc26c83ce64cf40523ecdb.exe
Size
430KB
MD5
900f2e1afb94aacc1c442d9014bea32e
SHA1
4939ffe3f3da3f1b3ac80032603002e801a6abec
SHA256
2c41f943338e180561280cc544d5462de702db0816bc26c83ce64cf40523ecdb
SHA512
be856154ddb9674bce1ff4462f529b2812d09a2ef2df9529458ea01f9ee7c03cf9b91154c9681fb0f4786dc426b7213fef2672e860ae480e5bfc5ca87c088ad6
SSDEEP
6144:kOmT9+the8+a+aNLWmgKa9o1aeI/YW1czhiJ:w90+aNPVaG1BI/YW1QiJ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnterCriticalSection
GetModuleFileNameA
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
FlushViewOfFile
OpenFileMappingW
GetModuleHandleW
LoadLibraryA
FreeLibrary
GetFileAttributesW
DeleteFileW
OpenProcess
VirtualProtect
GetCommandLineW
CreateProcessW
VirtualFree
ExitProcess
InitializeCriticalSectionAndSpinCount
TerminateProcess
RaiseException
DecodePointer
SetFileAttributesW
IsBadReadPtr
WideCharToMultiByte
LocalFree
CreateMutexW
ReleaseMutex
MultiByteToWideChar
GetComputerNameW
GetVersionExW
GetModuleHandleA
GetVolumeInformationW
CreateThread
GetNativeSystemInfo
SetLastError
VirtualAlloc
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
GetDriveTypeW
GetLogicalDriveStringsW
GetTickCount
ProcessIdToSessionId
GetStdHandle
DisableThreadLibraryCalls
CreateEventW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LeaveCriticalSection
Sleep
GetSystemTimeAsFileTime
WaitForSingleObject
OutputDebugStringW
lstrcatA
GetTempPathW
lstrlenW
GetModuleFileNameW
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
GetTempFileNameW
ReadFile
WriteFile
SetFilePointer
GetFileSize
CreateFileMappingW
GetFileSizeEx
CreateFileW
UnmapViewOfFile
MapViewOfFile
lstrcpynW
CloseHandle
CreateToolhelp32Snapshot
lstrcmpiW
Process32NextW
GetSystemInfo
Process32FirstW
SetErrorMode
CheckRemoteDebuggerPresent
GetProcAddress
LoadLibraryW
GetCurrentThread
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
GetFileType
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetModuleHandleExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetCommandLineA
GetTimeZoneInformation
LoadLibraryExW
GetDiskFreeSpaceExW
GetCurrentProcess
GetThreadContext
GlobalMemoryStatusEx
HeapReAlloc
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
GetStringTypeW
FindWindowW
GetSystemMetrics
wsprintfW
CryptDeriveKey
CryptReleaseContext
AdjustTokenPrivileges
LookupPrivilegeValueW
GetUserNameW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
CryptGetHashParam
RegOpenKeyW
CryptHashData
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptCreateHash
CryptAcquireContextW
ord680
SHGetSpecialFolderPathW
ShellExecuteW
CoUninitialize
CoInitialize
VariantClear
GetAdaptersAddresses
EnumProcessModules
GetModuleFileNameExW
EnumProcesses
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSetOption
WinHttpConnect
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpCrackUrl
WinHttpReadData
WinHttpSetCredentials
WinHttpAddRequestHeaders
WinHttpQueryAuthSchemes
WinHttpSendRequest
StrStrIW
PathAppendW
PathFileExistsW
SHSetValueW
wvnsprintfW
SHGetValueW
URLDownloadToCacheFileW
PdhRemoveCounter
PdhGetFormattedCounterValue
PdhOpenQueryW
PdhCloseQuery
PdhCollectQueryData
PdhAddCounterW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
DllMain
Reg
dllstart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ