Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02136F5D |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130612 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A015 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135404 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135608 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02133A0C |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02131030 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02137639 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A63F |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213163E |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213682A |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213325B |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02139C43 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213AE73 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135479 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213B878 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213147F |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213586F |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A896 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213B699 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130E85 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213B4B1 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021398DA |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021342D8 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02134EC9 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02132ECF |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021396F1 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021346FA |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130EFC |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A4ED |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02139D11 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213911A |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213651A |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02136F07 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213B30C |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130B35 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130F35 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135335 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02139738 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A53D |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02132F27 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02132129 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02132546 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213AB46 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130F49 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213416B |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213976C |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130791 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02131599 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130F98 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02131782 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02133185 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02134F8D |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A1CD |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213B3B7 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021341BA |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135FB8 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02134BA2 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021315D3 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021307D2 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021325C4 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A1CD |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021331F5 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021325E2 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02138BE6 |
Source: BANK DETAILS.exe, 00000000.00000002.1308709099.00000000020C0000.00000002.00000001.sdmp | Binary or memory string: OriginalFilenameuser32j% vs BANK DETAILS.exe |
Source: BANK DETAILS.exe, 00000000.00000000.220585259.000000000041B000.00000002.00020000.sdmp | Binary or memory string: OriginalFilenameMeloplasttyskl2.exe vs BANK DETAILS.exe |
Source: BANK DETAILS.exe, 00000000.00000002.1308835835.0000000002180000.00000004.00000001.sdmp | Binary or memory string: OriginalFilenameMeloplasttyskl2.exeFE2Xee vs BANK DETAILS.exe |
Source: BANK DETAILS.exe | Binary or memory string: OriginalFilenameMeloplasttyskl2.exe vs BANK DETAILS.exe |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Process information set: NOOPENFILEERRORBOX |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02136F5D NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130612 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135404 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135608 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02133A0C |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02131030 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02137639 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213163E |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213682A |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213AE73 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135479 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213147F |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02132066 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130E85 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02134EC9 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021346FA |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130EFC |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02136F07 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130B35 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130F35 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02135335 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130F49 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02131599 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02130F98 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02131782 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02134F8D |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A1CD |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02134BA2 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021315D3 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A1CD |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02138BE6 |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 0000000002136F8A second address: 0000000002136F8A instructions: |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 0000000002139479 second address: 00000000021394C2 instructions: 0x00000000 rdtsc 0x00000002 popad 0x00000003 mov eax, dword ptr fs:[00000030h] 0x00000009 mov eax, dword ptr [eax+0Ch] 0x0000000c mov eax, dword ptr [eax+14h] 0x0000000f test al, cl 0x00000011 mov ecx, dword ptr [eax] 0x00000013 mov eax, ecx 0x00000015 cmp ebx, eax 0x00000017 jmp 00007F2CCC39AE9Bh 0x00000019 test bx, bx 0x0000001c mov ebx, dword ptr [eax+28h] 0x0000001f mov dword ptr [ebp+00000277h], ebx 0x00000025 mov ebx, EFC24E89h 0x0000002a pushad 0x0000002b mov edi, 00000074h 0x00000030 rdtsc |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 0000000002139377 second address: 0000000002139377 instructions: |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 00000000021370DF second address: 0000000002137117 instructions: 0x00000000 rdtsc 0x00000002 popad 0x00000003 xor edi, 4F0B01ABh 0x00000009 cmp ch, ah 0x0000000b push edi 0x0000000c cmp bx, bx 0x0000000f mov edi, dword ptr [ebp+00000203h] 0x00000015 cmp ah, 00000001h 0x00000018 test ecx, ebx 0x0000001a mov dword ptr [ebp+00000148h], 00000000h 0x00000024 add ebx, 04h 0x00000027 mov dword ptr [ebp+0000024Ah], eax 0x0000002d cmp ch, FFFFFFDAh 0x00000030 mov eax, ebx 0x00000032 pushad 0x00000033 mov ecx, 00000042h 0x00000038 rdtsc |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 000000000213B44E second address: 0000000002139479 instructions: 0x00000000 rdtsc 0x00000002 popad 0x00000003 call 00007F2CCC9A9EE0h 0x00000008 test dl, dl 0x0000000a pushad 0x0000000b test bh, ah 0x0000000d cmp cl, bl 0x0000000f push 92D68FDCh 0x00000014 call 00007F2CCC9AA816h 0x00000019 pushad 0x0000001a mov edi, 00000045h 0x0000001f rdtsc |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 00000000021366CF second address: 00000000021367B7 instructions: 0x00000000 rdtsc 0x00000002 popad 0x00000003 cmp cx, 8B05h 0x00000008 mov dword ptr [ebp+00000212h], edi 0x0000000e test bh, dh 0x00000010 mov edi, ecx 0x00000012 push edi 0x00000013 cmp ecx, edx 0x00000015 mov edi, dword ptr [ebp+00000212h] 0x0000001b cmp bl, bl 0x0000001d test esi, 5BD1BFCAh 0x00000023 call 00007F2CCC39AF3Dh 0x00000028 call 00007F2CCC39AEAEh 0x0000002d lfence 0x00000030 mov edx, C7DAD013h 0x00000035 add edx, 5901ADA8h 0x0000003b xor edx, 770150F3h 0x00000041 xor edx, 28232D5Ch 0x00000047 mov edx, dword ptr [edx] 0x00000049 lfence 0x0000004c ret 0x0000004d mov esi, edx 0x0000004f pushad 0x00000050 rdtsc |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 00000000021367B7 second address: 0000000002136703 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 27269D29h 0x00000007 xor eax, A18D231Eh 0x0000000c xor eax, 1CE799B1h 0x00000011 sub eax, 9A4C2785h 0x00000016 cpuid 0x00000018 popad 0x00000019 call 00007F2CCC9AB37Dh 0x0000001e lfence 0x00000021 mov edx, C7DAD013h 0x00000026 add edx, 5901ADA8h 0x0000002c xor edx, 770150F3h 0x00000032 xor edx, 28232D5Ch 0x00000038 mov edx, dword ptr [edx] 0x0000003a lfence 0x0000003d ret 0x0000003e sub edx, esi 0x00000040 ret 0x00000041 cmp esi, C7A87762h 0x00000047 pushad 0x00000048 mov eax, 00000008h 0x0000004d rdtsc |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 0000000002136703 second address: 0000000002136745 instructions: 0x00000000 rdtsc 0x00000002 popad 0x00000003 pop ecx 0x00000004 cmp cx, E7B5h 0x00000009 add edi, edx 0x0000000b test bh, dh 0x0000000d dec ecx 0x0000000e mov dword ptr [ebp+0000024Eh], 76D68B9Dh 0x00000018 cmp ecx, edx 0x0000001a xor dword ptr [ebp+0000024Eh], 83B81CB0h 0x00000024 cmp bl, bl 0x00000026 test esi, 7FF4DB34h 0x0000002c xor dword ptr [ebp+0000024Eh], A8C87E56h 0x00000036 cmp esi, 10940B3Dh 0x0000003c pushad 0x0000003d mov eax, 00000064h 0x00000042 rdtsc |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | RDTSC instruction interceptor: First address: 0000000002136745 second address: 00000000021367B7 instructions: 0x00000000 rdtsc 0x00000002 popad 0x00000003 xor dword ptr [ebp+0000024Eh], 5DA6E97Bh 0x0000000d cmp cx, 91C2h 0x00000012 test bh, dh 0x00000014 cmp ecx, dword ptr [ebp+0000024Eh] 0x0000001a jne 00007F2CCC9AB2E3h 0x00000020 cmp cx, 8B05h 0x00000025 mov dword ptr [ebp+00000212h], edi 0x0000002b test bh, dh 0x0000002d mov edi, ecx 0x0000002f push edi 0x00000030 cmp ecx, edx 0x00000032 mov edi, dword ptr [ebp+00000212h] 0x00000038 cmp bl, bl 0x0000003a test esi, 5BD1BFCAh 0x00000040 call 00007F2CCC9AB42Dh 0x00000045 call 00007F2CCC9AB39Eh 0x0000004a lfence 0x0000004d mov edx, C7DAD013h 0x00000052 add edx, 5901ADA8h 0x00000058 xor edx, 770150F3h 0x0000005e xor edx, 28232D5Ch 0x00000064 mov edx, dword ptr [edx] 0x00000066 lfence 0x00000069 ret 0x0000006a mov esi, edx 0x0000006c pushad 0x0000006d rdtsc |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02133A0C mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02139473 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213652D mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213416B mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A1CD mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_021341BA mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02138FC0 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_02133DC6 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\BANK DETAILS.exe | Code function: 0_2_0213A1CD mov eax, dword ptr fs:[00000030h] |
Source: BANK DETAILS.exe, 00000000.00000002.1308437695.0000000000C40000.00000002.00000001.sdmp | Binary or memory string: Program Manager |
Source: BANK DETAILS.exe, 00000000.00000002.1308437695.0000000000C40000.00000002.00000001.sdmp | Binary or memory string: Shell_TrayWnd |
Source: BANK DETAILS.exe, 00000000.00000002.1308437695.0000000000C40000.00000002.00000001.sdmp | Binary or memory string: Progman |
Source: BANK DETAILS.exe, 00000000.00000002.1308437695.0000000000C40000.00000002.00000001.sdmp | Binary or memory string: Progmanlock |