RoamingTraiO
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?PowerUpgrade@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
d3c6757ea366a8f8805e92b4c7e6170fe8ec29e06d7eb47f3598f1bec2de9e85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3c6757ea366a8f8805e92b4c7e6170fe8ec29e06d7eb47f3598f1bec2de9e85.exe
Resource
win10v2004-20220812-en
Target
d3c6757ea366a8f8805e92b4c7e6170fe8ec29e06d7eb47f3598f1bec2de9e85
Size
265KB
MD5
4fc8bd7a7e5eb8f6d23dd086236ffed0
SHA1
c3f2b8f4a89050e1b8523183a8bd3a0cdf8ee3bf
SHA256
d3c6757ea366a8f8805e92b4c7e6170fe8ec29e06d7eb47f3598f1bec2de9e85
SHA512
fcd83b4214a5846a393c59a909d9262c310805c80c558acc577805b0d1416d46cf11cf5e5a2d300b6f9be09b0d6d7ef79a9357cf3655b784d8a3b17e0353d4b8
SSDEEP
3072:uG15uh/eI/97llrTVlAQE+mk7DFFYnwXhGA6NKnHUc8rY/PkqrEb8I/KIdaHHG:DEvTVlAQ5mkvhGA/nHEYkP8o
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharAlphaNumericW
LineDDA
GetConsoleCP
RoamingTraiO
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?PowerUpgrade@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE