?PatchCallBack@@YGPAXIPAX@Z
?PostStaticInit@Debug@@CAXXZ
?PreStaticInit@Debug@@CAPAV1@XZ
Static task
static1
Behavioral task
behavioral1
Sample
lotrbfme2ep1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
lotrbfme2ep1.exe
Resource
win10v2004-20230221-en
Target
lotrbfme2ep1.exe
Size
488KB
MD5
3d7da4dc0f45120e49c959b97c3a0865
SHA1
920810326d03c194a228aa23197f2c6efc72ac75
SHA256
034a5b9111b60279c4999f302fc991a31ed5f1741b8917c63f3e1471182d69c4
SHA512
2a9234d6e020f4924899a8a40a5d5bef90325a85181f3fbc84c6cd314c81206eaebea120827b95de014c3b9f8bdadb1cca73a17d9ec584317d7776a39147a852
SSDEEP
6144:Z+NHhGa/x2v3CAUMsh6dlkilvzPhPxWWWnxi5Sljquyxf2iKNz7+qdFE02KXPkAR:Z/3x5n1hPxJWn8Slj9LlzW02KcDs
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord17
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
GetStringTypeExA
GetStringTypeExW
FindClose
FindFirstFileA
FindNextFileA
LocalFree
LocalAlloc
GetCurrentProcess
GetCurrentThread
Sleep
CreateMutexA
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
OpenProcess
WaitForMultipleObjects
CreateEventA
UnmapViewOfFile
GetVolumeInformationA
MapViewOfFileEx
CreateFileMappingA
GetModuleFileNameA
InitializeCriticalSection
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
IsValidCodePage
IsValidLocale
GetUserDefaultLCID
GetDateFormatA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
IsBadWritePtr
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
HeapSize
QueryPerformanceCounter
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
SetStdHandle
SetHandleCount
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
lstrlenA
lstrcmpiW
lstrlenW
lstrcmpiA
GetVersion
DeleteCriticalSection
RaiseException
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
DeleteFileA
GetLastError
OutputDebugStringA
WideCharToMultiByte
WriteFile
CloseHandle
CreateFileA
DeviceIoControl
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetStartupInfoA
GetSystemTimeAsFileTime
SetCurrentDirectoryA
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
VirtualAlloc
HeapAlloc
HeapFree
RtlUnwind
GetStringTypeA
LCMapStringA
EnumSystemLocalesA
GetCPInfo
PeekNamedPipe
LCMapStringW
GetStringTypeW
MapViewOfFile
GetSystemInfo
GetFileType
FindResourceA
LoadResource
SizeofResource
LockResource
Module32First
SetUnhandledExceptionFilter
InterlockedIncrement
ReleaseMutex
InterlockedDecrement
IsBadReadPtr
GetCurrentThreadId
GetLocalTime
GetModuleHandleA
GetCommandLineA
GetTimeFormatA
GetCurrentProcessId
IsBadCodePtr
ReadProcessMemory
GlobalUnlock
GlobalLock
GlobalAlloc
Thread32Next
ResumeThread
Thread32First
GetExitCodeThread
CreateThread
SuspendThread
CreateToolhelp32Snapshot
ExitProcess
VirtualProtect
VirtualQuery
TerminateProcess
GlobalFree
GlobalSize
GlobalReAlloc
Beep
SetNamedPipeHandleState
GetComputerNameA
CopyFileA
FreeConsole
WriteConsoleOutputA
GetTickCount
GetConsoleScreenBufferInfo
ReadConsoleInputA
GetNumberOfConsoleInputEvents
GetStdHandle
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetConsoleTitleA
GetConsoleTitleA
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleMode
AllocConsole
WriteProcessMemory
Module32Next
CharUpperA
CharUpperW
MessageBoxW
CharLowerW
GetSystemMenu
DeleteMenu
DrawMenuBar
SetTimer
DialogBoxIndirectParamA
KillTimer
OpenClipboard
EmptyClipboard
SetClipboardData
CharLowerA
FindWindowA
PostThreadMessageA
PeekMessageA
SetWindowTextA
ExitWindowsEx
GetMessageA
DispatchMessageA
TranslateMessage
EndDialog
SendDlgItemMessageA
DefWindowProcA
RegisterClassA
GetSystemMetrics
CreateWindowExA
InvalidateRect
BeginPaint
GetClientRect
EndPaint
CreateDialogParamA
ShowWindow
SetForegroundWindow
LoadIconA
SendMessageA
GetDlgItem
SetWindowTextW
SetDlgItemTextW
DestroyWindow
PostQuitMessage
UnregisterClassA
GetWindowRect
GetWindowLongA
EnumThreadWindows
wsprintfA
wvsprintfA
MessageBoxA
CloseClipboard
SetDIBColorTable
SetStretchBltMode
StretchBlt
GetDIBColorTable
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
CreateFontA
CreateDIBSection
GetObjectA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
GetUserNameA
LookupPrivilegeValueA
AdjustTokenPrivileges
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
RegQueryValueExA
ShellExecuteA
GdiplusShutdown
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdiplusStartup
GdipBitmapUnlockBits
GdipGetImagePixelFormat
TransparentBlt
AlphaBlend
CreateStreamOnHGlobal
?PatchCallBack@@YGPAXIPAX@Z
?PostStaticInit@Debug@@CAXXZ
?PreStaticInit@Debug@@CAPAV1@XZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ